@@ -25538,6 +25538,7 @@ components:
2553825538 - $ref: '#/components/schemas/ObservabilityPipelineSentinelOneDestination'
2553925539 - $ref: '#/components/schemas/ObservabilityPipelineOpenSearchDestination'
2554025540 - $ref: '#/components/schemas/ObservabilityPipelineAmazonOpenSearchDestination'
25541+ - $ref: '#/components/schemas/ObservabilityPipelineSocketDestination'
2554125542 ObservabilityPipelineConfigProcessorItem:
2554225543 description: A processor for the pipeline.
2554325544 oneOf:
@@ -25557,6 +25558,7 @@ components:
2555725558 - $ref: '#/components/schemas/ObservabilityPipelineEnrichmentTableProcessor'
2555825559 - $ref: '#/components/schemas/ObservabilityPipelineReduceProcessor'
2555925560 - $ref: '#/components/schemas/ObservabilityPipelineThrottleProcessor'
25561+ - $ref: '#/components/schemas/ObservabilityPipelineCustomProcessorProcessor'
2556025562 ObservabilityPipelineConfigSourceItem:
2556125563 description: A data source for the pipeline.
2556225564 oneOf:
@@ -25575,6 +25577,87 @@ components:
2557525577 - $ref: '#/components/schemas/ObservabilityPipelineGooglePubSubSource'
2557625578 - $ref: '#/components/schemas/ObservabilityPipelineHttpClientSource'
2557725579 - $ref: '#/components/schemas/ObservabilityPipelineLogstashSource'
25580+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSource'
25581+ ObservabilityPipelineCustomProcessorProcessor:
25582+ description: The `custom_processor` processor transforms events using [Vector
25583+ Remap Language (VRL)](https://vector.dev/docs/reference/vrl/) scripts with
25584+ advanced filtering capabilities.
25585+ properties:
25586+ id:
25587+ description: The unique identifier for this processor.
25588+ example: remap-vrl-processor
25589+ type: string
25590+ include:
25591+ default: '*'
25592+ description: A Datadog search query used to determine which logs this processor
25593+ targets. This field should always be set to `*` for the custom_processor
25594+ processor.
25595+ example: '*'
25596+ type: string
25597+ inputs:
25598+ description: A list of component IDs whose output is used as the input for
25599+ this processor.
25600+ example:
25601+ - datadog-agent-source
25602+ items:
25603+ type: string
25604+ type: array
25605+ remaps:
25606+ description: Array of VRL remap rules.
25607+ items:
25608+ $ref: '#/components/schemas/ObservabilityPipelineCustomProcessorProcessorRemap'
25609+ minItems: 1
25610+ type: array
25611+ type:
25612+ $ref: '#/components/schemas/ObservabilityPipelineCustomProcessorProcessorType'
25613+ required:
25614+ - id
25615+ - type
25616+ - include
25617+ - remaps
25618+ - inputs
25619+ type: object
25620+ ObservabilityPipelineCustomProcessorProcessorRemap:
25621+ description: Defines a single VRL remap rule with its own filtering and transformation
25622+ logic.
25623+ properties:
25624+ drop_on_error:
25625+ default: false
25626+ description: Whether to drop events that caused errors during processing.
25627+ example: false
25628+ type: boolean
25629+ enabled:
25630+ default: true
25631+ description: Whether this remap rule is enabled.
25632+ example: true
25633+ type: boolean
25634+ include:
25635+ description: A Datadog search query used to filter events for this specific
25636+ remap rule.
25637+ example: service:web
25638+ type: string
25639+ name:
25640+ description: A descriptive name for this remap rule.
25641+ example: Parse JSON from message field
25642+ type: string
25643+ source:
25644+ description: The VRL script source code that defines the processing logic.
25645+ example: . = parse_json!(.message)
25646+ type: string
25647+ required:
25648+ - include
25649+ - name
25650+ - source
25651+ type: object
25652+ ObservabilityPipelineCustomProcessorProcessorType:
25653+ default: custom_processor
25654+ description: The processor type. The value should always be `custom_processor`.
25655+ enum:
25656+ - custom_processor
25657+ example: custom_processor
25658+ type: string
25659+ x-enum-varnames:
25660+ - CUSTOM_PROCESSOR
2557825661 ObservabilityPipelineData:
2557925662 description: "Contains the pipeline\u2019s ID, type, and configuration attributes."
2558025663 properties:
@@ -27858,6 +27941,278 @@ components:
2785827941 type: string
2785927942 x-enum-varnames:
2786027943 - SENTINEL_ONE
27944+ ObservabilityPipelineSocketDestination:
27945+ description: 'The `socket` destination sends logs over TCP or UDP to a remote
27946+ server.
27947+
27948+ '
27949+ properties:
27950+ encoding:
27951+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationEncoding'
27952+ framing:
27953+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFraming'
27954+ id:
27955+ description: The unique identifier for this component.
27956+ example: socket-destination
27957+ type: string
27958+ inputs:
27959+ description: A list of component IDs whose output is used as the `input`
27960+ for this component.
27961+ example:
27962+ - filter-processor
27963+ items:
27964+ type: string
27965+ type: array
27966+ mode:
27967+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationMode'
27968+ tls:
27969+ $ref: '#/components/schemas/ObservabilityPipelineTls'
27970+ description: TLS configuration. Relevant only when `mode` is `tcp`.
27971+ type:
27972+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationType'
27973+ required:
27974+ - id
27975+ - type
27976+ - inputs
27977+ - encoding
27978+ - framing
27979+ - mode
27980+ type: object
27981+ ObservabilityPipelineSocketDestinationEncoding:
27982+ description: Encoding format for log events.
27983+ enum:
27984+ - json
27985+ - raw_message
27986+ example: json
27987+ type: string
27988+ x-enum-varnames:
27989+ - JSON
27990+ - RAW_MESSAGE
27991+ ObservabilityPipelineSocketDestinationFraming:
27992+ description: Framing method configuration.
27993+ oneOf:
27994+ - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingNewlineDelimited'
27995+ - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingBytes'
27996+ - $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingCharacterDelimited'
27997+ ObservabilityPipelineSocketDestinationFramingBytes:
27998+ description: Event data is not delimited at all.
27999+ properties:
28000+ method:
28001+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingBytesMethod'
28002+ required:
28003+ - method
28004+ type: object
28005+ ObservabilityPipelineSocketDestinationFramingBytesMethod:
28006+ description: The definition of `ObservabilityPipelineSocketDestinationFramingBytesMethod`
28007+ object.
28008+ enum:
28009+ - bytes
28010+ example: bytes
28011+ type: string
28012+ x-enum-varnames:
28013+ - BYTES
28014+ ObservabilityPipelineSocketDestinationFramingCharacterDelimited:
28015+ description: Each log event is separated using the specified delimiter character.
28016+ properties:
28017+ delimiter:
28018+ description: A single ASCII character used as a delimiter.
28019+ example: '|'
28020+ maxLength: 1
28021+ minLength: 1
28022+ type: string
28023+ method:
28024+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod'
28025+ required:
28026+ - method
28027+ - delimiter
28028+ type: object
28029+ ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod:
28030+ description: The definition of `ObservabilityPipelineSocketDestinationFramingCharacterDelimitedMethod`
28031+ object.
28032+ enum:
28033+ - character_delimited
28034+ example: character_delimited
28035+ type: string
28036+ x-enum-varnames:
28037+ - CHARACTER_DELIMITED
28038+ ObservabilityPipelineSocketDestinationFramingNewlineDelimited:
28039+ description: Each log event is delimited by a newline character.
28040+ properties:
28041+ method:
28042+ $ref: '#/components/schemas/ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod'
28043+ required:
28044+ - method
28045+ type: object
28046+ ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod:
28047+ description: The definition of `ObservabilityPipelineSocketDestinationFramingNewlineDelimitedMethod`
28048+ object.
28049+ enum:
28050+ - newline_delimited
28051+ example: newline_delimited
28052+ type: string
28053+ x-enum-varnames:
28054+ - NEWLINE_DELIMITED
28055+ ObservabilityPipelineSocketDestinationMode:
28056+ description: Protocol used to send logs.
28057+ enum:
28058+ - tcp
28059+ - udp
28060+ example: tcp
28061+ type: string
28062+ x-enum-varnames:
28063+ - TCP
28064+ - UDP
28065+ ObservabilityPipelineSocketDestinationType:
28066+ default: socket
28067+ description: The destination type. The value should always be `socket`.
28068+ enum:
28069+ - socket
28070+ example: socket
28071+ type: string
28072+ x-enum-varnames:
28073+ - SOCKET
28074+ ObservabilityPipelineSocketSource:
28075+ description: 'The `socket` source ingests logs over TCP or UDP.
28076+
28077+ '
28078+ properties:
28079+ framing:
28080+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFraming'
28081+ id:
28082+ description: The unique identifier for this component. Used to reference
28083+ this component in other parts of the pipeline (e.g., as input to downstream
28084+ components).
28085+ example: socket-source
28086+ type: string
28087+ mode:
28088+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceMode'
28089+ tls:
28090+ $ref: '#/components/schemas/ObservabilityPipelineTls'
28091+ description: TLS configuration. Relevant only when `mode` is `tcp`.
28092+ type:
28093+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceType'
28094+ required:
28095+ - id
28096+ - type
28097+ - mode
28098+ - framing
28099+ type: object
28100+ ObservabilityPipelineSocketSourceFraming:
28101+ description: Framing method configuration for the socket source.
28102+ oneOf:
28103+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingNewlineDelimited'
28104+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingBytes'
28105+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingCharacterDelimited'
28106+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingOctetCounting'
28107+ - $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingChunkedGelf'
28108+ ObservabilityPipelineSocketSourceFramingBytes:
28109+ description: Byte frames are passed through as-is according to the underlying
28110+ I/O boundaries (for example, split between messages or stream segments).
28111+ properties:
28112+ method:
28113+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingBytesMethod'
28114+ required:
28115+ - method
28116+ type: object
28117+ ObservabilityPipelineSocketSourceFramingBytesMethod:
28118+ description: Byte frames are passed through as-is according to the underlying
28119+ I/O boundaries (for example, split between messages or stream segments).
28120+ enum:
28121+ - bytes
28122+ example: bytes
28123+ type: string
28124+ x-enum-varnames:
28125+ - BYTES
28126+ ObservabilityPipelineSocketSourceFramingCharacterDelimited:
28127+ description: Byte frames which are delimited by a chosen character.
28128+ properties:
28129+ delimiter:
28130+ description: A single ASCII character used to delimit events.
28131+ example: '|'
28132+ maxLength: 1
28133+ minLength: 1
28134+ type: string
28135+ method:
28136+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingCharacterDelimitedMethod'
28137+ required:
28138+ - method
28139+ - delimiter
28140+ type: object
28141+ ObservabilityPipelineSocketSourceFramingCharacterDelimitedMethod:
28142+ description: Byte frames which are delimited by a chosen character.
28143+ enum:
28144+ - character_delimited
28145+ example: character_delimited
28146+ type: string
28147+ x-enum-varnames:
28148+ - CHARACTER_DELIMITED
28149+ ObservabilityPipelineSocketSourceFramingChunkedGelf:
28150+ description: Byte frames which are chunked GELF messages.
28151+ properties:
28152+ method:
28153+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingChunkedGelfMethod'
28154+ required:
28155+ - method
28156+ type: object
28157+ ObservabilityPipelineSocketSourceFramingChunkedGelfMethod:
28158+ description: Byte frames which are chunked GELF messages.
28159+ enum:
28160+ - chunked_gelf
28161+ example: chunked_gelf
28162+ type: string
28163+ x-enum-varnames:
28164+ - CHUNKED_GELF
28165+ ObservabilityPipelineSocketSourceFramingNewlineDelimited:
28166+ description: Byte frames which are delimited by a newline character.
28167+ properties:
28168+ method:
28169+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingNewlineDelimitedMethod'
28170+ required:
28171+ - method
28172+ type: object
28173+ ObservabilityPipelineSocketSourceFramingNewlineDelimitedMethod:
28174+ description: Byte frames which are delimited by a newline character.
28175+ enum:
28176+ - newline_delimited
28177+ example: newline_delimited
28178+ type: string
28179+ x-enum-varnames:
28180+ - NEWLINE_DELIMITED
28181+ ObservabilityPipelineSocketSourceFramingOctetCounting:
28182+ description: Byte frames according to the octet counting format as per RFC6587.
28183+ properties:
28184+ method:
28185+ $ref: '#/components/schemas/ObservabilityPipelineSocketSourceFramingOctetCountingMethod'
28186+ required:
28187+ - method
28188+ type: object
28189+ ObservabilityPipelineSocketSourceFramingOctetCountingMethod:
28190+ description: Byte frames according to the octet counting format as per RFC6587.
28191+ enum:
28192+ - octet_counting
28193+ example: octet_counting
28194+ type: string
28195+ x-enum-varnames:
28196+ - OCTET_COUNTING
28197+ ObservabilityPipelineSocketSourceMode:
28198+ description: Protocol used to receive logs.
28199+ enum:
28200+ - tcp
28201+ - udp
28202+ example: tcp
28203+ type: string
28204+ x-enum-varnames:
28205+ - TCP
28206+ - UDP
28207+ ObservabilityPipelineSocketSourceType:
28208+ default: socket
28209+ description: The source type. The value should always be `socket`.
28210+ enum:
28211+ - socket
28212+ example: socket
28213+ type: string
28214+ x-enum-varnames:
28215+ - SOCKET
2786128216 ObservabilityPipelineSpec:
2786228217 description: Input schema representing an observability pipeline configuration.
2786328218 Used in create and validate requests.
0 commit comments