elastic_security_cases data source

blackstork/elastic, v0.4.2

Installation #

BlackStork SaaS: Plugin dependencies are resolved automatically by the platform. You do not need to install plugins or define the blackstork configuration block manually.

To use the elastic_security_cases data source locally via blackstork-cli, you must declare the blackstork/elastic plugin as a dependency in your global configuration block.

blackstork {
  plugin_versions = {
    "blackstork/elastic" = ">= v0.4.2"
  }
}

After declaring the dependency, execute blackstork-cli install to fetch the plugin. See Configuration for details.

Configuration #

This data source accepts the following configuration arguments within a config data elastic_security_cases block:

config data elastic_security_cases {
  # Required string.
  #
  # For example:
  kibana_endpoint_url = "some string"

  # Optional string.
  # Default value:
  api_key_str = null

  # Optional [string, string].
  # Default value:
  api_key = null
}

Usage #

This data source accepts the following arguments within a data elastic_security_cases block:

data elastic_security_cases {
  # Optional string.
  # Default value:
  space_id = null

  # Optional list of string.
  # Default value:
  assignees = null

  # Optional string.
  # Default value:
  default_search_operator = null

  # Optional string.
  # Default value:
  from = null

  # Optional list of string.
  # Default value:
  owner = null

  # Optional list of string.
  # Default value:
  reporters = null

  # Optional string.
  # Default value:
  search = null

  # Optional list of string.
  # Default value:
  search_fields = null

  # Optional string.
  # Default value:
  severity = null

  # Optional string.
  # Default value:
  sort_field = null

  # Optional string.
  # Default value:
  sort_order = null

  # Optional string.
  # Default value:
  status = null

  # Optional list of string.
  # Default value:
  tags = null

  # Optional string.
  # Default value:
  to = null

  # Optional number.
  # Default value:
  size = null
}