Skip to content

ngsiem_data_connector

Reads a single NG-SIEM connector from the catalog by its exact name, returning its catalog ID, supported parsers, type, and vendor metadata.

The following API scopes are required:

  • NGSIEM Data Connections API: READ
terraform {
required_providers {
crowdstrike = {
source = "registry.terraform.io/crowdstrike/crowdstrike"
}
}
}
provider "crowdstrike" {}
data "crowdstrike_ngsiem_data_connector" "s3_access_logs" {
name = "Amazon S3 Access Log Data Connector"
}
output "connector_id" {
value = data.crowdstrike_ngsiem_data_connector.s3_access_logs.id
}
output "parsers" {
value = data.crowdstrike_ngsiem_data_connector.s3_access_logs.parsers
}
  • name (String) The exact name of the connector to look up (case-sensitive), e.g. Amazon S3 Access Log Data Connector.
  • description (String) The connector description.
  • id (String) The connector catalog ID.
  • log_sources (List of String) Log sources declared by the connector.
  • parsers (List of String) All parsers the connector supports.
  • subscription (String) The subscription the connector belongs to (e.g. Next-Gen SIEM).
  • type (String) The connector type (PULL or PUSH).
  • vendor_name (String) The vendor name (e.g. AmazonWebServices).
  • vendor_product_name (String) The vendor product name (e.g. Amazon S3 Access Logs).