---
title: "Get a Source"
method: GET
path: "/system/inputs/{id}"
tags: ["sources"]
---

# Get a Source

`GET /system/inputs/{id}`

Get the specified Source.

## Path parameters

- `id` string, required

## Response `200`

a list of Source objects

- CountedInput
  - `count` integer — number of items present in the items array
  - `items` Input[]
    - union
      - InputCollection
        - `id` string — Unique ID for this input
        - `type` 'collection', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process results
        - `sendToRoutes` boolean — Send events to normal routing and event processing. Disable to select a specific Pipeline/Destination combination.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `preprocess` PreprocessType
          - `disabled` boolean, required
          - `command` string — Command to feed the data through (via stdin) and process its output (stdout)
          - `args` string[] — Arguments to be added to the custom command
        - `throttleRatePerSec` string — Rate (in bytes per second) to throttle while writing to an output. Accepts values with multiple-byte units, such as KB, MB, and GB. (Example: 42 MB) Default value of 0 specifies no throttling.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `output` string — Destination to send results to
      - InputKafka
        - `id` string — Unique ID for this input
        - `type` 'kafka', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `brokers` string[], required — Enter each Kafka bootstrap server you want to use. Specify the hostname and port (such as mykafkabroker:9092) or just the hostname (in which case @{product} will assign port 9092).
        - `topics` string[], required — Topic to subscribe to. Warning: To optimize performance, Cribl suggests subscribing each Kafka Source to a single topic only.
        - `groupId` string — The consumer group to which this instance belongs. Defaults to 'Cribl'.
        - `fromBeginning` boolean — Leave enabled if you want the Source, upon first subscribing to a topic, to read starting with the earliest available message
        - `kafkaSchemaRegistry` KafkaSchemaRegistryAuthenticationType
          - `disabled` boolean, required
          - `schemaRegistryURL` string — URL for accessing the Confluent Schema Registry. Example: http://localhost:8081. To connect over TLS, use https instead of http.
          - `connectionTimeout` number — Maximum time to wait for a Schema Registry connection to complete successfully
          - `requestTimeout` number — Maximum time to wait for the Schema Registry to respond to a request
          - `maxRetries` number — Maximum number of times to try fetching schemas from the Schema Registry
          - `auth` AuthTypeKafkaSchemaRegistry — Credentials to use when authenticating with the schema registry using basic HTTP authentication
            - `disabled` boolean, required
            - `credentialsSecret` string — Select or create a secret that references your credentials
          - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
            - `disabled` boolean
            - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
            - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
            - `certificateName` string — The name of the predefined certificate
            - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
            - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
            - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
            - `passphrase` string — Passphrase to use to decrypt private key
            - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
            - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `connectionTimeout` number — Maximum time to wait for a connection to complete successfully
        - `requestTimeout` number — Maximum time to wait for Kafka to respond to a request
        - `maxRetries` number — If messages are failing, you can set the maximum number of retries as high as 100 to prevent loss of data
        - `maxBackOff` number — The maximum wait time for a retry, in milliseconds. Default (and minimum) is 30,000 ms (30 seconds); maximum is 180,000 ms (180 seconds).
        - `initialBackoff` number — Initial value used to calculate the retry, in milliseconds. Maximum is 600,000 ms (10 minutes).
        - `backoffRate` number — Set the backoff multiplier (2-20) to control the retry frequency for failed messages. For faster retries, use a lower multiplier. For slower retries with more delay between attempts, use a higher multiplier. The multiplier is used in an exponential backoff formula; see the Kafka [documentation](https://kafka.js.org/docs/retry-detailed) for details.
        - `authenticationTimeout` number — Maximum time to wait for Kafka to respond to an authentication request
        - `reauthenticationThreshold` number — Specifies a time window during which @{product} can reauthenticate if needed. Creates the window measuring backward from the moment when credentials are set to expire.
        - `sasl` AuthenticationType — Authentication parameters to use when connecting to brokers. Using TLS is highly recommended.
          - `disabled` boolean, required
          - `username` string
          - `password` string
          - `authType` 'manual' | 'secret' — Enter credentials directly, or select a stored secret
          - `credentialsSecret` string — Select or create a secret that references your credentials
          - `mechanism` 'plain' | 'scram-sha-256' | 'scram-sha-512' | 'kerberos'
          - `keytabLocation` string — Location of keytab file for authentication principal
          - `principal` string — Authentication principal, such as `kafka_user@example.com`
          - `brokerServiceClass` string — Kerberos service class for Kafka brokers, such as `kafka`
          - `oauthEnabled` boolean — Enable OAuth authentication
          - `tokenUrl` string — URL of the token endpoint to use for OAuth authentication
          - `clientId` string — Client ID to use for OAuth authentication
          - `oauthSecretType` string
          - `clientTextSecret` string — Select or create a stored text secret
          - `oauthParams` ItemsTypeSaslOauthParams[] — Additional fields to send to the token endpoint, such as scope or audience
            - `name` string, required
            - `value` string, required
          - `saslExtensions` ItemsTypeSaslSaslExtensions[] — Additional SASL extension fields, such as Confluent's logicalCluster or identityPoolId
            - `name` string, required
            - `value` string, required
        - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
          - `disabled` boolean
          - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
          - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
          - `certificateName` string — The name of the predefined certificate
          - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
          - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
          - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `sessionTimeout` number — Timeout used to detect client failures when using Kafka's group-management facilities. If the client sends no heartbeats to the broker before the timeout expires, the broker will remove the client from the group and initiate a rebalance. Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_session.timeout.ms) for details.
        - `rebalanceTimeout` number — Maximum allowed time for each worker to join the group after a rebalance begins. If the timeout is exceeded, the coordinator broker will remove the worker from the group. See [Kafka's documentation](https://kafka.apache.org/documentation/#connectconfigs_rebalance.timeout.ms) for details.
        - `heartbeatInterval` number — Expected time between heartbeats to the consumer coordinator when using Kafka's group-management facilities. Value must be lower than sessionTimeout and typically should not exceed 1/3 of the sessionTimeout value. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_heartbeat.interval.ms) for details.
        - `autoCommitInterval` number — How often to commit offsets. If both this and Offset commit threshold are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `autoCommitThreshold` number — How many events are needed to trigger an offset commit. If both this and Offset commit interval are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `maxBytesPerPartition` number — Maximum amount of data that Kafka will return per partition, per fetch request. Must equal or exceed the maximum message size (maxBytesPerPartition) that Kafka is configured to allow. Otherwise, @{product} can get stuck trying to retrieve messages. Defaults to 1048576 (1 MB).
        - `maxBytes` number — Maximum number of bytes that Kafka will return per fetch request. Defaults to 10485760 (10 MB).
        - `maxSocketErrors` number — Maximum number of network errors before the consumer re-creates a socket
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
      - InputMsk
        - `id` string — Unique ID for this input
        - `type` 'msk', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `brokers` string[], required — Enter each Kafka bootstrap server you want to use. Specify the hostname and port (such as mykafkabroker:9092) or just the hostname (in which case @{product} will assign port 9092).
        - `topics` string[], required — Topic to subscribe to. Warning: To optimize performance, Cribl suggests subscribing each Kafka Source to a single topic only.
        - `groupId` string — The consumer group to which this instance belongs. Defaults to 'Cribl'.
        - `fromBeginning` boolean — Leave enabled if you want the Source, upon first subscribing to a topic, to read starting with the earliest available message
        - `sessionTimeout` number — Timeout used to detect client failures when using Kafka's group-management facilities. If the client sends no heartbeats to the broker before the timeout expires, the broker will remove the client from the group and initiate a rebalance. Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_session.timeout.ms) for details.
        - `rebalanceTimeout` number — Maximum allowed time for each worker to join the group after a rebalance begins. If the timeout is exceeded, the coordinator broker will remove the worker from the group. See [Kafka's documentation](https://kafka.apache.org/documentation/#connectconfigs_rebalance.timeout.ms) for details.
        - `heartbeatInterval` number — Expected time between heartbeats to the consumer coordinator when using Kafka's group-management facilities. Value must be lower than sessionTimeout and typically should not exceed 1/3 of the sessionTimeout value. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_heartbeat.interval.ms) for details.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `kafkaSchemaRegistry` KafkaSchemaRegistryAuthenticationType
          - `disabled` boolean, required
          - `schemaRegistryURL` string — URL for accessing the Confluent Schema Registry. Example: http://localhost:8081. To connect over TLS, use https instead of http.
          - `connectionTimeout` number — Maximum time to wait for a Schema Registry connection to complete successfully
          - `requestTimeout` number — Maximum time to wait for the Schema Registry to respond to a request
          - `maxRetries` number — Maximum number of times to try fetching schemas from the Schema Registry
          - `auth` AuthTypeKafkaSchemaRegistry — Credentials to use when authenticating with the schema registry using basic HTTP authentication
            - `disabled` boolean, required
            - `credentialsSecret` string — Select or create a secret that references your credentials
          - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
            - `disabled` boolean
            - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
            - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
            - `certificateName` string — The name of the predefined certificate
            - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
            - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
            - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
            - `passphrase` string — Passphrase to use to decrypt private key
            - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
            - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `connectionTimeout` number — Maximum time to wait for a connection to complete successfully
        - `requestTimeout` number — Maximum time to wait for Kafka to respond to a request
        - `maxRetries` number — If messages are failing, you can set the maximum number of retries as high as 100 to prevent loss of data
        - `maxBackOff` number — The maximum wait time for a retry, in milliseconds. Default (and minimum) is 30,000 ms (30 seconds); maximum is 180,000 ms (180 seconds).
        - `initialBackoff` number — Initial value used to calculate the retry, in milliseconds. Maximum is 600,000 ms (10 minutes).
        - `backoffRate` number — Set the backoff multiplier (2-20) to control the retry frequency for failed messages. For faster retries, use a lower multiplier. For slower retries with more delay between attempts, use a higher multiplier. The multiplier is used in an exponential backoff formula; see the Kafka [documentation](https://kafka.js.org/docs/retry-detailed) for details.
        - `authenticationTimeout` number — Maximum time to wait for Kafka to respond to an authentication request
        - `reauthenticationThreshold` number — Specifies a time window during which @{product} can reauthenticate if needed. Creates the window measuring backward from the moment when credentials are set to expire.
        - `awsAuthenticationMethod` 'auto' | 'manual' | 'secret', required — AWS authentication method. Choose Auto to use IAM roles.
        - `awsSecretKey` string
        - `region` string, required — Region where the MSK cluster is located
        - `endpoint` string — MSK cluster service endpoint. If empty, defaults to the AWS Region-specific endpoint. Otherwise, it must point to MSK cluster-compatible endpoint.
        - `signatureVersion` 'v2' | 'v4' — Signature version to use for signing MSK cluster requests
        - `reuseConnections` boolean — Reuse connections between requests, which can improve performance
        - `rejectUnauthorized` boolean — Reject certificates that cannot be verified against a valid CA, such as self-signed certificates
        - `enableAssumeRole` boolean — Use Assume Role credentials to access MSK
        - `assumeRoleArn` string — Amazon Resource Name (ARN) of the role to assume
        - `assumeRoleExternalId` string — External ID to use when assuming role
        - `durationSeconds` number — Duration of the assumed role's session, in seconds. Minimum is 900 (15 minutes), default is 3600 (1 hour), and maximum is 43200 (12 hours).
        - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
          - `disabled` boolean
          - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
          - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
          - `certificateName` string — The name of the predefined certificate
          - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
          - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
          - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `autoCommitInterval` number — How often to commit offsets. If both this and Offset commit threshold are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `autoCommitThreshold` number — How many events are needed to trigger an offset commit. If both this and Offset commit interval are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `maxBytesPerPartition` number — Maximum amount of data that Kafka will return per partition, per fetch request. Must equal or exceed the maximum message size (maxBytesPerPartition) that Kafka is configured to allow. Otherwise, @{product} can get stuck trying to retrieve messages. Defaults to 1048576 (1 MB).
        - `maxBytes` number — Maximum number of bytes that Kafka will return per fetch request. Defaults to 10485760 (10 MB).
        - `maxSocketErrors` number — Maximum number of network errors before the consumer re-creates a socket
        - `description` string
        - `awsApiKey` string
        - `awsSecret` string — Select or create a stored secret that references your access key and secret key
        - `__template_awsSecretKey` string — Binds 'awsSecretKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsSecretKey' at runtime.
        - `__template_region` string — Binds 'region' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'region' at runtime.
        - `__template_assumeRoleArn` string — Binds 'assumeRoleArn' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleArn' at runtime.
        - `__template_assumeRoleExternalId` string — Binds 'assumeRoleExternalId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleExternalId' at runtime.
        - `__template_awsApiKey` string — Binds 'awsApiKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsApiKey' at runtime.
      - InputHttp
        - `id` string — Unique ID for this input
        - `type` 'http', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `authTokens` string[] — Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted.
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `criblAPI` string — Absolute path on which to listen for the Cribl HTTP API requests. Only _bulk (default /cribl/_bulk) is available. Use empty string to disable.
        - `elasticAPI` string — Absolute path on which to listen for the Elasticsearch API requests. Only _bulk (default /elastic/_bulk) is available. Use empty string to disable.
        - `splunkHecAPI` string — Absolute path on which listen for the Splunk HTTP Event Collector API requests. Use empty string to disable.
        - `splunkHecAcks` boolean
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `authTokensExt` ItemsTypeAuthTokensExt[] — Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted.
          - `token` string, required — Shared secret to be provided by any client (Authorization: <token>)
          - `description` string
          - `metadata` ItemsTypeMetadata[] — Fields to add to events referencing this token
            - `name` string, required
            - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
        - `__template_splunkHecAPI` string — Binds 'splunkHecAPI' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'splunkHecAPI' at runtime.
      - InputSplunk
        - `id` string — Unique ID for this input
        - `type` 'splunk', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `ipWhitelistRegex` string — Regex matching IP addresses that are allowed to establish a connection
        - `maxActiveCxn` number — Maximum number of active connections allowed per Worker Process. Use 0 for unlimited.
        - `socketIdleTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. After this time, the connection will be closed. Leave at 0 for no inactive socket monitoring.
        - `socketEndingMaxWait` number — How long the server will wait after initiating a closure for a client to close its end of the connection. If the client doesn't close the connection within this time, the server will forcefully terminate the socket to prevent resource leaks and ensure efficient connection cleanup and system stability. Leave at 0 for no inactive socket monitoring.
        - `socketMaxLifespan` number — The maximum duration a socket can remain open, even if active. This helps manage resources and mitigate issues caused by TCP pinning. Set to 0 to disable.
        - `enableProxyHeader` boolean — Enable if the connection is proxied by a device that supports proxy protocol v1 or v2
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `authTokens` object[] — Shared secrets to be provided by any Splunk forwarder. If empty, unauthorized access is permitted.
          - `token` string, required — Shared secrets to be provided by any Splunk forwarder. If empty, unauthorized access is permitted.
          - `description` string
        - `maxS2Sversion` 'v3' | 'v4' — The highest S2S protocol version to advertise during handshake
        - `description` string
        - `useFwdTimezone` boolean — Event Breakers will determine events' time zone from UF-provided metadata, when TZ can't be inferred from the raw event
        - `dropControlFields` boolean — Drop Splunk control fields such as `crcSalt` and `_savedPort`. If disabled, control fields are stored in the internal field `__ctrlFields`.
        - `extractMetrics` boolean — Extract and process Splunk-generated metrics as Cribl metrics
        - `compress` 'disabled' | 'auto' | 'always' — Controls whether to support reading compressed data from a forwarder. Select 'Automatic' to match the forwarder's configuration, or 'Disabled' to reject compressed connections.
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputSplunkSearch
        - `id` string — Unique ID for this input
        - `type` 'splunk_search', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `searchHead` string, required — Search head base URL. Can be an expression. Default is https://localhost:8089.
        - `search` string, required — Enter Splunk search here. Examples: 'index=myAppLogs level=error channel=myApp' OR '| mstats avg(myStat) as myStat WHERE index=myStatsIndex.'
        - `earliest` string — The earliest time boundary for the search. Can be an exact or relative time. Examples: '2022-01-14T12:00:00Z' or '-16m@m'
        - `latest` string — The latest time boundary for the search. Can be an exact or relative time. Examples: '2022-01-14T12:00:00Z' or '-1m@m'
        - `cronSchedule` string, required — A cron schedule on which to run this job
        - `endpoint` string, required — REST API used to create a search
        - `outputMode` 'csv' | 'json', required — Format of the returned output
        - `endpointParams` object[] — Optional request parameters to send to the endpoint
          - `name` string, required
          - `value` string, required — JavaScript expression to compute the parameter's value, normally enclosed in backticks (e.g., `${earliest}`). If a constant, use single quotes (e.g., 'earliest'). Values without delimiters (e.g., earliest) are evaluated as strings.
        - `endpointHeaders` object[] — Optional request headers to send to the endpoint
          - `name` string, required
          - `value` string, required — JavaScript expression to compute the header's value, normally enclosed in backticks (e.g., `${earliest}`). If a constant, use single quotes (e.g., 'earliest'). Values without delimiters (e.g., earliest) are evaluated as strings.
        - `logLevel` 'error' | 'warn' | 'info' | 'debug' — Collector runtime log level (verbosity)
        - `requestTimeout` number — HTTP request inactivity timeout. Use 0 for no timeout.
        - `useRoundRobinDns` boolean — When a DNS server returns multiple addresses, @{product} will cycle through them in the order returned
        - `rejectUnauthorized` boolean — Reject certificates that cannot be verified against a valid CA (such as self-signed certificates)
        - `encoding` string — Character encoding to use when parsing ingested data. When not set, @{product} will default to UTF-8 but may incorrectly interpret multi-byte characters.
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run (e.g., 30, 45s or 15m). Units are seconds, if not specified. Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `retryRules` RetryRulesType
          - `type` 'none' | 'backoff' | 'static', required — The algorithm to use when performing HTTP retries
          - `interval` number — Time interval between failed request and first retry (kickoff). Maximum allowed value is 20,000 ms (1/3 minute).
          - `limit` number — The maximum number of times to retry a failed HTTP request
          - `multiplier` number — Base for exponential backoff, e.g., base 2 means that retries will occur after 2, then 4, then 8 seconds, and so on
          - `codes` number[] — List of HTTP codes that trigger a retry. Leave empty to use the default list of 429 and 503.
          - `enableHeader` boolean — Honor any Retry-After header that specifies a delay (in seconds) or a timestamp after which to retry the request. The delay is limited to 20 seconds, even if the Retry-After header specifies a longer delay. When disabled, all Retry-After headers are ignored.
          - `retryConnectTimeout` boolean — Make a single retry attempt when a connection timeout (ETIMEDOUT) error occurs
          - `retryConnectReset` boolean — Retry request when a connection reset (ECONNRESET) error occurs
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Splunk Search authentication type
        - `description` string
        - `username` string
        - `password` string
        - `token` string — Bearer token to include in the authorization header
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `textSecret` string — Select or create a stored text secret
      - InputSplunkHec
        - `id` string — Unique ID for this input
        - `type` 'splunk_hec', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `authTokens` object[] — Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted.
          - `authType` 'manual' | 'secret' — Select Manual to enter an auth token directly, or select Secret to use a text secret to authenticate
          - `tokenSecret` string — Select or create a stored text secret
          - `token` string, required — Shared secret to be provided by any client (Authorization: <token>)
          - `enabled` boolean
          - `description` string — Optional token description
          - `allowedIndexesAtToken` string[] — Enter the values you want to allow in the HEC event index field at the token level. Supports wildcards. To skip validation, leave blank.
          - `metadata` ItemsTypeMetadata[] — Fields to add to events referencing this token
            - `name` string, required
            - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `splunkHecAPI` string, required — Absolute path on which to listen for the Splunk HTTP Event Collector API requests. This input supports the /event, /raw and /s2s endpoints.
        - `metadata` ItemsTypeMetadata[] — Fields to add to every event. Overrides fields added at the token or request level. See [the Source documentation](https://docs.cribl.io/stream/sources-splunk-hec/#fields) for more info.
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `allowedIndexes` string[] — List values allowed in HEC event index field. Leave blank to skip validation. Supports wildcards. The values here can expand index validation at the token level.
        - `splunkHecAcks` boolean — Enable Splunk HEC acknowledgements
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `useFwdTimezone` boolean — Event Breakers will determine events' time zone from UF-provided metadata, when TZ can't be inferred from the raw event
        - `dropControlFields` boolean — Drop Splunk control fields such as `crcSalt` and `_savedPort`. If disabled, control fields are stored in the internal field `__ctrlFields`.
        - `extractMetrics` boolean — Extract and process Splunk-generated metrics as Cribl metrics
        - `accessControlAllowOrigin` string[] — Optionally, list HTTP origins to which @{product} should send CORS (cross-origin resource sharing) Access-Control-Allow-* headers. Supports wildcards.
        - `accessControlAllowHeaders` string[] — Optionally, list HTTP headers that @{product} will send to allowed origins as "Access-Control-Allow-Headers" in a CORS preflight response. Use "*" to allow all headers.
        - `emitTokenMetrics` boolean — Emit per-token (<prefix>.http.perToken) and summary (<prefix>.http.summary) request metrics
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
        - `__template_splunkHecAPI` string — Binds 'splunkHecAPI' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'splunkHecAPI' at runtime.
      - InputAzureBlob
        - `id` string — Unique ID for this input
        - `type` 'azure_blob', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `queueName` string, required — The storage account queue name blob notifications will be read from. Value must be a JavaScript expression (which can evaluate to a constant value), enclosed in quotes or backticks. Can be evaluated only at initialization time. Example referencing a Global Variable: `myQueue-${C.vars.myVar}`
        - `fileFilter` string — Regex matching file names to download and process. Defaults to: .*
        - `visibilityTimeout` number — The duration (in seconds) that the received messages are hidden from subsequent retrieve requests after being retrieved by a ReceiveMessage request.
        - `numReceivers` number — How many receiver processes to run. The higher the number, the better the throughput - at the expense of CPU overhead.
        - `maxMessages` number — The maximum number of messages to return in a poll request. Azure storage queues never returns more messages than this value (however, fewer messages might be returned). Valid values: 1 to 32.
        - `servicePeriodSecs` number — The duration (in seconds) which pollers should be validated and restarted if exited
        - `skipOnError` boolean — Skip files that trigger a processing error. Disabled by default, which allows retries after processing errors.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `parquetChunkSizeMB` number — Maximum file size for each Parquet chunk
        - `parquetChunkDownloadTimeout` number — The maximum time allowed for downloading a Parquet chunk. Processing will stop if a chunk cannot be downloaded within the time specified.
        - `authType` 'manual' | 'secret' | 'clientSecret' | 'clientCert'
        - `description` string
        - `connectionString` string — Enter your Azure Storage account connection string. If left blank, Stream will fall back to env.AZURE_STORAGE_CONNECTION_STRING.
        - `textSecret` string — Select or create a stored text secret
        - `storageAccountName` string — The name of your Azure storage account
        - `tenantId` string — The service principal's tenant ID
        - `clientId` string — The service principal's client ID
        - `azureCloud` string — The Azure cloud to use. Defaults to Azure Public Cloud.
        - `endpointSuffix` string — Endpoint suffix for the service URL. Takes precedence over the Azure Cloud setting. Defaults to core.windows.net.
        - `clientTextSecret` string — Select or create a stored text secret
        - `certificate` CertificateTypeAzureBlobAuthTypeClientCert
          - `certificateName` string, required — The certificate you registered as credentials for your app in the Azure portal
        - `__template_queueName` string — Binds 'queueName' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'queueName' at runtime.
        - `__template_connectionString` string — Binds 'connectionString' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'connectionString' at runtime.
        - `__template_tenantId` string — Binds 'tenantId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'tenantId' at runtime.
        - `__template_clientId` string — Binds 'clientId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'clientId' at runtime.
      - InputElastic
        - `id` string — Unique ID for this input
        - `type` 'elastic', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `elasticAPI` string, required — Absolute path on which to listen for Elasticsearch API requests. Defaults to /. _bulk will be appended automatically. For example, /myPath becomes /myPath/_bulk. Requests can then be made to either /myPath/_bulk or /myPath/<myIndexName>/_bulk. Other entries are faked as success.
        - `authType` 'none' | 'basic' | 'credentialsSecret' | 'authTokens'
        - `apiVersion` '6.8.4' | '8.3.2' | 'custom' — The API version to use for communicating with the server
        - `extraHttpHeaders` ItemsTypeExtraHttpHeaders[] — Headers to add to all events
          - `name` string
          - `value` string, required
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `proxyMode` object
          - `enabled` boolean, required — Enable proxying of non-bulk API requests to an external Elastic server. Enable this only if you understand the implications. See [Cribl Docs](https://docs.cribl.io/stream/sources-elastic/#proxy-mode) for more details.
          - `authType` 'none' | 'manual' | 'secret' — Enter credentials directly, or select a stored secret
          - `username` string
          - `password` string
          - `credentialsSecret` string — Select or create a secret that references your credentials
          - `url` string — URL of the Elastic server to proxy non-bulk requests to, such as http://elastic:9200
          - `rejectUnauthorized` boolean — Reject certificates that cannot be verified against a valid CA (such as self-signed certificates)
          - `removeHeaders` string[] — List of headers to remove from the request to proxy
          - `timeoutSec` number — Amount of time, in seconds, to wait for a proxy request to complete before canceling it
          - `__template_url` string — Binds 'url' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'url' at runtime.
        - `description` string
        - `username` string
        - `password` string
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `authTokens` string[] — Bearer tokens to include in the authorization header
        - `customAPIVersion` string — Custom version information to respond to requests
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputConfluentCloud
        - `id` string — Unique ID for this input
        - `type` 'confluent_cloud', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `brokers` string[], required — List of Confluent Cloud bootstrap servers to use, such as yourAccount.confluent.cloud:9092
        - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
          - `disabled` boolean
          - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
          - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
          - `certificateName` string — The name of the predefined certificate
          - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
          - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
          - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `topics` string[], required — Topic to subscribe to. Warning: To optimize performance, Cribl suggests subscribing each Kafka Source to a single topic only.
        - `groupId` string — The consumer group to which this instance belongs. Defaults to 'Cribl'.
        - `fromBeginning` boolean — Leave enabled if you want the Source, upon first subscribing to a topic, to read starting with the earliest available message
        - `kafkaSchemaRegistry` KafkaSchemaRegistryAuthenticationType
          - `disabled` boolean, required
          - `schemaRegistryURL` string — URL for accessing the Confluent Schema Registry. Example: http://localhost:8081. To connect over TLS, use https instead of http.
          - `connectionTimeout` number — Maximum time to wait for a Schema Registry connection to complete successfully
          - `requestTimeout` number — Maximum time to wait for the Schema Registry to respond to a request
          - `maxRetries` number — Maximum number of times to try fetching schemas from the Schema Registry
          - `auth` AuthTypeKafkaSchemaRegistry — Credentials to use when authenticating with the schema registry using basic HTTP authentication
            - `disabled` boolean, required
            - `credentialsSecret` string — Select or create a secret that references your credentials
          - `tls` TlsSettingsClientSideTypeKafkaSchemaRegistry
            - `disabled` boolean
            - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's). Defaults to Enabled. Overrides the toggle from Advanced Settings, when also present.
            - `servername` string — Server name for the SNI (Server Name Indication) TLS extension. It must be a host name, and not an IP address.
            - `certificateName` string — The name of the predefined certificate
            - `caPath` string — Path on client in which to find CA certificates to verify the server's cert. PEM format. Can reference $ENV_VARS.
            - `privKeyPath` string — Path on client in which to find the private key to use. PEM format. Can reference $ENV_VARS.
            - `certPath` string — Path on client in which to find certificates to use. PEM format. Can reference $ENV_VARS.
            - `passphrase` string — Passphrase to use to decrypt private key
            - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
            - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `connectionTimeout` number — Maximum time to wait for a connection to complete successfully
        - `requestTimeout` number — Maximum time to wait for Kafka to respond to a request
        - `maxRetries` number — If messages are failing, you can set the maximum number of retries as high as 100 to prevent loss of data
        - `maxBackOff` number — The maximum wait time for a retry, in milliseconds. Default (and minimum) is 30,000 ms (30 seconds); maximum is 180,000 ms (180 seconds).
        - `initialBackoff` number — Initial value used to calculate the retry, in milliseconds. Maximum is 600,000 ms (10 minutes).
        - `backoffRate` number — Set the backoff multiplier (2-20) to control the retry frequency for failed messages. For faster retries, use a lower multiplier. For slower retries with more delay between attempts, use a higher multiplier. The multiplier is used in an exponential backoff formula; see the Kafka [documentation](https://kafka.js.org/docs/retry-detailed) for details.
        - `authenticationTimeout` number — Maximum time to wait for Kafka to respond to an authentication request
        - `reauthenticationThreshold` number — Specifies a time window during which @{product} can reauthenticate if needed. Creates the window measuring backward from the moment when credentials are set to expire.
        - `sasl` AuthenticationType — Authentication parameters to use when connecting to brokers. Using TLS is highly recommended.
          - `disabled` boolean, required
          - `username` string
          - `password` string
          - `authType` 'manual' | 'secret' — Enter credentials directly, or select a stored secret
          - `credentialsSecret` string — Select or create a secret that references your credentials
          - `mechanism` 'plain' | 'scram-sha-256' | 'scram-sha-512' | 'kerberos'
          - `keytabLocation` string — Location of keytab file for authentication principal
          - `principal` string — Authentication principal, such as `kafka_user@example.com`
          - `brokerServiceClass` string — Kerberos service class for Kafka brokers, such as `kafka`
          - `oauthEnabled` boolean — Enable OAuth authentication
          - `tokenUrl` string — URL of the token endpoint to use for OAuth authentication
          - `clientId` string — Client ID to use for OAuth authentication
          - `oauthSecretType` string
          - `clientTextSecret` string — Select or create a stored text secret
          - `oauthParams` ItemsTypeSaslOauthParams[] — Additional fields to send to the token endpoint, such as scope or audience
            - `name` string, required
            - `value` string, required
          - `saslExtensions` ItemsTypeSaslSaslExtensions[] — Additional SASL extension fields, such as Confluent's logicalCluster or identityPoolId
            - `name` string, required
            - `value` string, required
        - `sessionTimeout` number — Timeout used to detect client failures when using Kafka's group-management facilities. If the client sends no heartbeats to the broker before the timeout expires, the broker will remove the client from the group and initiate a rebalance. Value must be between the broker's configured group.min.session.timeout.ms and group.max.session.timeout.ms. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_session.timeout.ms) for details.
        - `rebalanceTimeout` number — Maximum allowed time for each worker to join the group after a rebalance begins. If the timeout is exceeded, the coordinator broker will remove the worker from the group. See [Kafka's documentation](https://kafka.apache.org/documentation/#connectconfigs_rebalance.timeout.ms) for details.
        - `heartbeatInterval` number — Expected time between heartbeats to the consumer coordinator when using Kafka's group-management facilities. Value must be lower than sessionTimeout and typically should not exceed 1/3 of the sessionTimeout value. See [Kafka's documentation](https://kafka.apache.org/documentation/#consumerconfigs_heartbeat.interval.ms) for details.
        - `autoCommitInterval` number — How often to commit offsets. If both this and Offset commit threshold are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `autoCommitThreshold` number — How many events are needed to trigger an offset commit. If both this and Offset commit interval are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `maxBytesPerPartition` number — Maximum amount of data that Kafka will return per partition, per fetch request. Must equal or exceed the maximum message size (maxBytesPerPartition) that Kafka is configured to allow. Otherwise, @{product} can get stuck trying to retrieve messages. Defaults to 1048576 (1 MB).
        - `maxBytes` number — Maximum number of bytes that Kafka will return per fetch request. Defaults to 10485760 (10 MB).
        - `maxSocketErrors` number — Maximum number of network errors before the consumer re-creates a socket
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
      - union
        - object
          - `id` string — Unique ID for this input
          - `type` 'grafana', required
          - `disabled` boolean
          - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
          - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
          - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
          - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
          - `streamtags` string[] — Tags for filtering and grouping in @{product}
          - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
            - `pipeline` string
            - `output` string
          - `pq` PqType
            - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
            - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
            - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
            - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
            - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
            - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
            - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
            - `pqControls` object
          - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
          - `port` number, required — Port to listen on
          - `tls` TlsSettingsServerSideType
            - `disabled` boolean
            - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
            - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
            - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
            - `certificateName` string — The name of the predefined certificate
            - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
            - `passphrase` string — Passphrase to use to decrypt private key
            - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
            - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
            - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
            - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
          - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
          - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
          - `captureHeaders` boolean — Add request headers to events, in the __headers field
          - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
          - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
          - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
          - `keepAliveTimeout` number — Maximum time to wait for additional data, after the last response was sent, before closing a socket connection. This can be very useful when Grafana Agent remote write's request frequency is high so, reusing connections, would help mitigating the cost of creating a new connection per request. Note that Grafana Agent's embedded Prometheus would attempt to keep connections open for up to 5 minutes.
          - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
          - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
          - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
          - `prometheusAPI` string, required — Absolute path on which to listen for Grafana Agent's Remote Write requests. Defaults to /api/prom/push, which will expand as: 'http://<your‑upstream‑URL>:<your‑port>/api/prom/push'. Either this field or 'Logs API endpoint' must be configured.
          - `lokiAPI` string — Absolute path on which to listen for Loki logs requests. Defaults to /loki/api/v1/push, which will (in this example) expand as: 'http://<your‑upstream‑URL>:<your‑port>/loki/api/v1/push'. Either this field or 'Remote Write API endpoint' must be configured.
          - `prometheusAuth` object
            - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Remote Write authentication type
            - `username` string
            - `password` string
            - `token` string — Bearer token to include in the authorization header
            - `credentialsSecret` string — Select or create a secret that references your credentials
            - `textSecret` string — Select or create a stored text secret
          - `lokiAuth` object
            - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Loki logs authentication type
            - `username` string
            - `password` string
            - `token` string — Bearer token to include in the authorization header
            - `credentialsSecret` string — Select or create a secret that references your credentials
            - `textSecret` string — Select or create a stored text secret
          - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
            - `name` string, required
            - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
          - `description` string
          - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
          - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
        - object
          - `id` string — Unique ID for this input
          - `type` 'grafana', required
          - `disabled` boolean
          - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
          - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
          - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
          - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
          - `streamtags` string[] — Tags for filtering and grouping in @{product}
          - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
            - `pipeline` string
            - `output` string
          - `pq` PqType
            - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
            - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
            - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
            - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
            - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
            - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
            - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
            - `pqControls` object
          - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
          - `port` number, required — Port to listen on
          - `tls` TlsSettingsServerSideType
            - `disabled` boolean
            - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
            - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
            - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
            - `certificateName` string — The name of the predefined certificate
            - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
            - `passphrase` string — Passphrase to use to decrypt private key
            - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
            - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
            - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
            - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
          - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
          - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
          - `captureHeaders` boolean — Add request headers to events, in the __headers field
          - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
          - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
          - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
          - `keepAliveTimeout` number — Maximum time to wait for additional data, after the last response was sent, before closing a socket connection. This can be very useful when Grafana Agent remote write's request frequency is high so, reusing connections, would help mitigating the cost of creating a new connection per request. Note that Grafana Agent's embedded Prometheus would attempt to keep connections open for up to 5 minutes.
          - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
          - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
          - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
          - `prometheusAPI` string — Absolute path on which to listen for Grafana Agent's Remote Write requests. Defaults to /api/prom/push, which will expand as: 'http://<your‑upstream‑URL>:<your‑port>/api/prom/push'. Either this field or 'Logs API endpoint' must be configured.
          - `lokiAPI` string, required — Absolute path on which to listen for Loki logs requests. Defaults to /loki/api/v1/push, which will (in this example) expand as: 'http://<your‑upstream‑URL>:<your‑port>/loki/api/v1/push'. Either this field or 'Remote Write API endpoint' must be configured.
          - `prometheusAuth` object
            - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Remote Write authentication type
            - `username` string
            - `password` string
            - `token` string — Bearer token to include in the authorization header
            - `credentialsSecret` string — Select or create a secret that references your credentials
            - `textSecret` string — Select or create a stored text secret
          - `lokiAuth` object
            - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Loki logs authentication type
            - `username` string
            - `password` string
            - `token` string — Bearer token to include in the authorization header
            - `credentialsSecret` string — Select or create a secret that references your credentials
            - `textSecret` string — Select or create a stored text secret
          - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
            - `name` string, required
            - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
          - `description` string
          - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
          - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputLoki
        - `id` string — Unique ID for this input
        - `type` 'loki', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `lokiAPI` string, required — Absolute path on which to listen for Loki logs requests. Defaults to /loki/api/v1/push, which will (in this example) expand as: 'http://<your‑upstream‑URL>:<your‑port>/loki/api/v1/push'.
        - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Loki logs authentication type
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `username` string
        - `password` string
        - `token` string — Bearer token to include in the authorization header
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `textSecret` string — Select or create a stored text secret
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputPrometheusRw
        - `id` string — Unique ID for this input
        - `type` 'prometheus_rw', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `prometheusAPI` string, required — Absolute path on which to listen for Prometheus requests. Defaults to /write, which will expand as: http://<your‑upstream‑URL>:<your‑port>/write.
        - `authType` 'none' | 'basic' | 'credentialsSecret' | 'token' | 'textSecret' — Remote Write authentication type
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `username` string
        - `password` string
        - `token` string — Bearer token to include in the authorization header
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `textSecret` string — Select or create a stored text secret
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
        - `__template_prometheusAPI` string — Binds 'prometheusAPI' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'prometheusAPI' at runtime.
      - InputPrometheus
        - `id` string — Unique ID for this input
        - `type` 'prometheus', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `dimensionList` string[] — Other dimensions to include in events
        - `discoveryType` 'static' | 'dns' | 'ec2' — Target discovery mechanism. Use static to manually enter a list of targets.
        - `interval` number, required — How often, in minutes, to scrape targets for metrics. Maximum of 60 minutes. 60 must be evenly divisible by the value you enter.
        - `logLevel` 'error' | 'warn' | 'info' | 'debug', required — Collector runtime log level
        - `rejectUnauthorized` boolean — Reject certificates that cannot be verified against a valid CA, such as self-signed certificates
        - `timeout` number — Time, in seconds, before aborting HTTP connection attempts; use 0 for no timeout
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run (e.g., 30, 45s or 15m). Units are seconds, if not specified. Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `authType` 'manual' | 'secret' — Enter credentials directly, or select a stored secret
        - `description` string
        - `targetList` string[] — List of Prometheus targets to pull metrics from. Values can be in URL or host[:port] format. For example: http://localhost:9090/metrics, localhost:9090, or localhost. In cases where just host[:port] is specified, the endpoint will resolve to 'http://host[:port]/metrics'.
        - `recordType` 'SRV' | 'A' | 'AAAA' — DNS record type to resolve
        - `scrapePort` number — The port number in the metrics URL for discovered targets
        - `nameList` string[] — List of DNS names to resolve
        - `scrapeProtocol` 'http' | 'https' — Protocol to use when collecting metrics
        - `scrapePath` string — Path to use when collecting metrics from discovered targets
        - `awsAuthenticationMethod` 'auto' | 'manual' | 'secret' — AWS authentication method. Choose Auto to use IAM roles.
        - `awsApiKey` string
        - `awsSecret` string — Select or create a stored secret that references your access key and secret key
        - `usePublicIp` boolean — Use public IP address for discovered targets. Disable to use the private IP address.
        - `searchFilter` ItemsTypeSearchFilter[] — Filter to apply when searching for EC2 instances
          - `Name` string, required — See https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html for information. Attributes can be manually entered if not present in the list.
          - `Values` string[], required — Values to match within this row's attribute. If empty, search will return only running EC2 instances.
        - `awsSecretKey` string
        - `region` string — Region where the EC2 is located
        - `endpoint` string — EC2 service endpoint. If empty, defaults to the AWS Region-specific endpoint. Otherwise, it must point to EC2-compatible endpoint.
        - `signatureVersion` 'v2' | 'v4' — Signature version to use for signing EC2 requests
        - `reuseConnections` boolean — Reuse connections between requests, which can improve performance
        - `enableAssumeRole` boolean — Use Assume Role credentials to access EC2
        - `assumeRoleArn` string — Amazon Resource Name (ARN) of the role to assume
        - `assumeRoleExternalId` string — External ID to use when assuming role
        - `durationSeconds` number — Duration of the assumed role's session, in seconds. Minimum is 900 (15 minutes), default is 3600 (1 hour), and maximum is 43200 (12 hours).
        - `username` string — Username for Prometheus Basic authentication
        - `password` string — Password for Prometheus Basic authentication
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `__template_logLevel` string — Binds 'logLevel' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'logLevel' at runtime.
        - `__template_awsApiKey` string — Binds 'awsApiKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsApiKey' at runtime.
        - `__template_awsSecretKey` string — Binds 'awsSecretKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsSecretKey' at runtime.
        - `__template_region` string — Binds 'region' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'region' at runtime.
        - `__template_assumeRoleArn` string — Binds 'assumeRoleArn' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleArn' at runtime.
        - `__template_assumeRoleExternalId` string — Binds 'assumeRoleExternalId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleExternalId' at runtime.
      - InputEdgePrometheus
        - `id` string — Unique ID for this input
        - `type` 'edge_prometheus', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `dimensionList` string[] — Other dimensions to include in events
        - `discoveryType` 'static' | 'dns' | 'ec2' | 'k8s-node' | 'k8s-pods', required — Target discovery mechanism. Use static to manually enter a list of targets.
        - `interval` number, required — How often in seconds to scrape targets for metrics.
        - `timeout` number — Timeout, in milliseconds, before aborting HTTP connection attempts; 1-60000 or 0 to disable
        - `persistence` DiskSpoolingType
          - `enable` boolean — Spool events on disk for Cribl Edge and Search. Default is disabled.
          - `timeWindow` string — Time period for grouping spooled events. Default is 10m.
          - `maxDataSize` string — Maximum disk space that can be consumed before older buckets are deleted. Examples: 420MB, 4GB. Default is 1GB.
          - `maxDataTime` string — Maximum amount of time to retain data before older buckets are deleted. Examples: 2h, 4d. Default is 24h.
          - `compress` 'none' | 'gzip' — Data compression format. Default is gzip.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `authType` 'manual' | 'secret' | 'kubernetes' — Enter credentials directly, or select a stored secret
        - `description` string
        - `targets` object[]
          - `protocol` 'http' | 'https' — Protocol to use when collecting metrics
          - `host` string, required — Name of host from which to pull metrics.
          - `port` number — The port number in the metrics URL for discovered targets.
          - `path` string — Path to use when collecting metrics from discovered targets
        - `recordType` 'SRV' | 'A' | 'AAAA' — DNS record type to resolve
        - `scrapePort` number — The port number in the metrics URL for discovered targets.
        - `nameList` string[] — List of DNS names to resolve
        - `scrapeProtocol` 'http' | 'https' — Protocol to use when collecting metrics
        - `scrapePath` string — Path to use when collecting metrics from discovered targets
        - `awsAuthenticationMethod` 'auto' | 'manual' | 'secret' — AWS authentication method. Choose Auto to use IAM roles.
        - `awsApiKey` string
        - `awsSecret` string — Select or create a stored secret that references your access key and secret key
        - `usePublicIp` boolean — Use public IP address for discovered targets. Disable to use the private IP address.
        - `searchFilter` ItemsTypeSearchFilter[] — Filter to apply when searching for EC2 instances
          - `Name` string, required — See https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html for information. Attributes can be manually entered if not present in the list.
          - `Values` string[], required — Values to match within this row's attribute. If empty, search will return only running EC2 instances.
        - `awsSecretKey` string
        - `region` string — Region where the EC2 is located
        - `endpoint` string — EC2 service endpoint. If empty, defaults to the AWS Region-specific endpoint. Otherwise, it must point to EC2-compatible endpoint.
        - `signatureVersion` 'v2' | 'v4' — Signature version to use for signing EC2 requests
        - `reuseConnections` boolean — Reuse connections between requests, which can improve performance
        - `rejectUnauthorized` boolean — Reject certificates that cannot be verified against a valid CA, such as self-signed certificates
        - `enableAssumeRole` boolean — Use Assume Role credentials to access EC2
        - `assumeRoleArn` string — Amazon Resource Name (ARN) of the role to assume
        - `assumeRoleExternalId` string — External ID to use when assuming role
        - `durationSeconds` number — Duration of the assumed role's session, in seconds. Minimum is 900 (15 minutes), default is 3600 (1 hour), and maximum is 43200 (12 hours).
        - `scrapeProtocolExpr` string — Protocol to use when collecting metrics
        - `scrapePortExpr` string — The port number in the metrics URL for discovered targets.
        - `scrapePathExpr` string — Path to use when collecting metrics from discovered targets
        - `podFilter` object[] — Add rules to decide which pods to discover for metrics. Pods are searched if no rules are given or of all the rules' expressions evaluate to true.
          - `filter` string, required — JavaScript expression applied to pods objects. Return 'true' to include it.
          - `description` string — Optional description of this rule's purpose
        - `username` string — Username for Prometheus Basic authentication
        - `password` string — Password for Prometheus Basic authentication
        - `credentialsSecret` string — Select or create a secret that references your credentials
        - `__template_awsApiKey` string — Binds 'awsApiKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsApiKey' at runtime.
        - `__template_awsSecretKey` string — Binds 'awsSecretKey' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'awsSecretKey' at runtime.
        - `__template_region` string — Binds 'region' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'region' at runtime.
        - `__template_assumeRoleArn` string — Binds 'assumeRoleArn' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleArn' at runtime.
        - `__template_assumeRoleExternalId` string — Binds 'assumeRoleExternalId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'assumeRoleExternalId' at runtime.
      - InputOffice365Mgmt
        - `id` string — Unique ID for this input
        - `type` 'office365_mgmt', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `planType` 'enterprise_gcc' | 'gcc' | 'gcc_high' | 'dod', required — Office 365 subscription plan for your organization, typically Office 365 Enterprise
        - `tenantId` string, required — Office 365 Azure Tenant ID
        - `appId` string, required — Office 365 Azure Application ID
        - `timeout` number — HTTP request inactivity timeout, use 0 to disable
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run (e.g., 30, 45s or 15m). Units are seconds, if not specified. Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `publisherIdentifier` string — Optional Publisher Identifier to use in API requests, defaults to tenant id if not defined. For more information see [here](https://docs.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference#start-a-subscription)
        - `contentConfig` object[] — Enable Office 365 Management Activity API content types and polling intervals. Polling intervals are used to set up search date range and cron schedule, e.g.: */${interval} * * * *. Because of this, intervals entered must be evenly divisible by 60 to give a predictable schedule.
          - `contentType` string — Office 365 Management Activity API Content Type
          - `description` string — If interval type is minutes the value entered must evenly divisible by 60 or save will fail
          - `interval` number
          - `logLevel` 'error' | 'warn' | 'info' | 'debug' — Collector runtime Log Level
          - `enabled` boolean
        - `ingestionLag` number — Use this setting to account for ingestion lag. This is necessary because there can be a lag of 60 - 90 minutes (or longer) before Office 365 events are available for retrieval.
        - `retryRules` RetryRulesType1
          - `type` 'none' | 'backoff' | 'static', required — The algorithm to use when performing HTTP retries
          - `interval` number — Time interval between failed request and first retry (kickoff). Maximum allowed value is 20,000 ms (1/3 minute).
          - `limit` number — The maximum number of times to retry a failed HTTP request
          - `multiplier` number — Base for exponential backoff, e.g., base 2 means that retries will occur after 2, then 4, then 8 seconds, and so on
          - `codes` number[] — List of http codes that trigger a retry. Leave empty to use the default list of 429, 500, and 503.
          - `enableHeader` boolean — Honor any Retry-After header that specifies a delay (in seconds) or a timestamp after which to retry the request. The delay is limited to 20 seconds, even if the Retry-After header specifies a longer delay. When disabled, all Retry-After headers are ignored.
          - `retryConnectTimeout` boolean — Make a single retry attempt when a connection timeout (ETIMEDOUT) error occurs
          - `retryConnectReset` boolean — Retry request when a connection reset (ECONNRESET) error occurs
        - `authType` 'manual' | 'secret' — Enter client secret directly, or select a stored secret
        - `description` string
        - `clientSecret` string — Office 365 Azure client secret
        - `textSecret` string — Select or create a stored text secret
        - `__template_tenantId` string — Binds 'tenantId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'tenantId' at runtime.
        - `__template_appId` string — Binds 'appId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'appId' at runtime.
        - `__template_publisherIdentifier` string — Binds 'publisherIdentifier' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'publisherIdentifier' at runtime.
        - `__template_clientSecret` string — Binds 'clientSecret' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'clientSecret' at runtime.
      - InputOffice365Service
        - `id` string — Unique ID for this input
        - `type` 'office365_service', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `planType` 'enterprise_gcc' | 'gcc' | 'gcc_high' | 'dod' — Office 365 subscription plan for your organization, typically Office 365 Enterprise
        - `tenantId` string, required — Office 365 Azure Tenant ID
        - `appId` string, required — Office 365 Azure Application ID
        - `timeout` number — HTTP request inactivity timeout, use 0 to disable
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run (e.g., 30, 45s or 15m). Units are seconds, if not specified. Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `contentConfig` object[] — Enable Office 365 Service Communication API content types and polling intervals. Polling intervals are used to set up search date range and cron schedule, e.g.: */${interval} * * * *. Because of this, intervals entered for current and historical status must be evenly divisible by 60 to give a predictable schedule.
          - `contentType` string — Office 365 Services API Content Type
          - `description` string — If interval type is minutes the value entered must evenly divisible by 60 or save will fail
          - `interval` number
          - `logLevel` 'error' | 'warn' | 'info' | 'debug' — Collector runtime Log Level
          - `enabled` boolean
        - `retryRules` RetryRulesType1
          - `type` 'none' | 'backoff' | 'static', required — The algorithm to use when performing HTTP retries
          - `interval` number — Time interval between failed request and first retry (kickoff). Maximum allowed value is 20,000 ms (1/3 minute).
          - `limit` number — The maximum number of times to retry a failed HTTP request
          - `multiplier` number — Base for exponential backoff, e.g., base 2 means that retries will occur after 2, then 4, then 8 seconds, and so on
          - `codes` number[] — List of http codes that trigger a retry. Leave empty to use the default list of 429, 500, and 503.
          - `enableHeader` boolean — Honor any Retry-After header that specifies a delay (in seconds) or a timestamp after which to retry the request. The delay is limited to 20 seconds, even if the Retry-After header specifies a longer delay. When disabled, all Retry-After headers are ignored.
          - `retryConnectTimeout` boolean — Make a single retry attempt when a connection timeout (ETIMEDOUT) error occurs
          - `retryConnectReset` boolean — Retry request when a connection reset (ECONNRESET) error occurs
        - `authType` 'manual' | 'secret' — Enter client secret directly, or select a stored secret
        - `description` string
        - `clientSecret` string — Office 365 Azure client secret
        - `textSecret` string — Select or create a stored text secret
        - `__template_tenantId` string — Binds 'tenantId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'tenantId' at runtime.
        - `__template_appId` string — Binds 'appId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'appId' at runtime.
        - `__template_clientSecret` string — Binds 'clientSecret' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'clientSecret' at runtime.
      - InputOffice365MsgTrace
        - `id` string — Unique ID for this input
        - `type` 'office365_msg_trace', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `url` string, required — URL to use when retrieving report data.
        - `interval` integer, required — How often (in minutes) to run the report. Must divide evenly into 60 minutes to create a predictable schedule, or Save will fail.
        - `startDate` string — Backward offset for the search range's head. (E.g.: -3h@h) Message Trace data is delayed; this parameter (with Date range end) compensates for delay and gaps.
        - `endDate` string — Backward offset for the search range's tail. (E.g.: -2h@h) Message Trace data is delayed; this parameter (with Date range start) compensates for delay and gaps.
        - `timeout` number — HTTP request inactivity timeout. Maximum is 2400 (40 minutes); enter 0 to wait indefinitely.
        - `disableTimeFilter` boolean — Disables time filtering of events when a date range is specified.
        - `authType` 'manual' | 'secret' | 'oauth' | 'oauthSecret' | 'oauthCert' — Select authentication method.
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run. Time unit defaults to seconds if not specified (examples: 30, 45s, 15m). Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `rescheduleDroppedTasks` boolean — Reschedule tasks that failed with non-fatal errors
        - `maxTaskReschedule` number — Maximum number of times a task can be rescheduled
        - `logLevel` 'error' | 'warn' | 'info' | 'debug' | 'silly' — Log Level (verbosity) for collection runtime behavior.
        - `retryRules` RetryRulesType1
          - `type` 'none' | 'backoff' | 'static', required — The algorithm to use when performing HTTP retries
          - `interval` number — Time interval between failed request and first retry (kickoff). Maximum allowed value is 20,000 ms (1/3 minute).
          - `limit` number — The maximum number of times to retry a failed HTTP request
          - `multiplier` number — Base for exponential backoff, e.g., base 2 means that retries will occur after 2, then 4, then 8 seconds, and so on
          - `codes` number[] — List of http codes that trigger a retry. Leave empty to use the default list of 429, 500, and 503.
          - `enableHeader` boolean — Honor any Retry-After header that specifies a delay (in seconds) or a timestamp after which to retry the request. The delay is limited to 20 seconds, even if the Retry-After header specifies a longer delay. When disabled, all Retry-After headers are ignored.
          - `retryConnectTimeout` boolean — Make a single retry attempt when a connection timeout (ETIMEDOUT) error occurs
          - `retryConnectReset` boolean — Retry request when a connection reset (ECONNRESET) error occurs
        - `description` string
        - `username` string — Username to run Message Trace API call.
        - `password` string — Password to run Message Trace API call.
        - `credentialsSecret` string — Select or create a secret that references your credentials.
        - `clientSecret` string — client_secret to pass in the OAuth request parameter.
        - `tenantId` string — Directory ID (tenant identifier) in Azure Active Directory.
        - `clientId` string — client_id to pass in the OAuth request parameter.
        - `resource` string — Resource to pass in the OAuth request parameter.
        - `planType` 'enterprise_gcc' | 'gcc' | 'gcc_high' | 'dod' — Office 365 subscription plan for your organization, typically Office 365 Enterprise
        - `textSecret` string — Select or create a secret that references your client_secret to pass in the OAuth request parameter.
        - `certOptions` CertOptionsType
          - `certificateName` string — The name of the predefined certificate.
          - `privKeyPath` string, required — Path to the private key to use. Key should be in PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt the private key.
          - `certPath` string, required — Path to the certificate to use. Certificate should be in PEM format. Can reference $ENV_VARS.
        - `__template_url` string — Binds 'url' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'url' at runtime.
        - `__template_tenantId` string — Binds 'tenantId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'tenantId' at runtime.
        - `__template_clientId` string — Binds 'clientId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'clientId' at runtime.
        - `__template_resource` string — Binds 'resource' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'resource' at runtime.
      - InputMicrosoftGraph
        - `id` string — Unique ID for this input
        - `type` 'microsoft_graph', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `url` string, required — Microsoft Graph API endpoint URL. (ex. https://graph.microsoft.com/v1.0/admin/exchange/tracing/messageTraces)
        - `interval` integer, required — How often (in minutes) to run the report. Must divide evenly into 60 minutes to create a predictable schedule, or Save will fail.
        - `startDate` string — Backward offset for the search range's head. (E.g.: -3h@h) Microsoft Graph data is delayed; this parameter (with Date range end) compensates for delay and gaps.
        - `endDate` string — Backward offset for the search range's tail. (E.g.: -2h@h) Microsoft Graph data is delayed; this parameter (with Date range start) compensates for delay and gaps.
        - `timeout` number — HTTP request inactivity timeout. Maximum is 2400 (40 minutes); enter 0 to wait indefinitely.
        - `disableTimeFilter` boolean — Disables time filtering of events when a date range is specified.
        - `authType` 'manual' | 'secret' | 'oauth' | 'oauthSecret' | 'oauthCert' — Select authentication method.
        - `keepAliveTime` number — How often workers should check in with the scheduler to keep job subscription alive
        - `jobTimeout` string — Maximum time the job is allowed to run. Time unit defaults to seconds if not specified (examples: 30, 45s, 15m). Enter 0 for unlimited time.
        - `maxMissedKeepAlives` number — The number of Keep Alive Time periods before an inactive worker will have its job subscription revoked.
        - `ttl` string — Time to keep the job's artifacts on disk after job completion. This also affects how long a job is listed in the Job Inspector.
        - `ignoreGroupJobsLimit` boolean — When enabled, this job's artifacts are not counted toward the Worker Group's finished job artifacts limit. Artifacts will be removed only after the Collector's configured time to live.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `rescheduleDroppedTasks` boolean — Reschedule tasks that failed with non-fatal errors
        - `maxTaskReschedule` number — Maximum number of times a task can be rescheduled
        - `logLevel` 'error' | 'warn' | 'info' | 'debug' | 'silly' — Log Level (verbosity) for collection runtime behavior.
        - `retryRules` RetryRulesType1
          - `type` 'none' | 'backoff' | 'static', required — The algorithm to use when performing HTTP retries
          - `interval` number — Time interval between failed request and first retry (kickoff). Maximum allowed value is 20,000 ms (1/3 minute).
          - `limit` number — The maximum number of times to retry a failed HTTP request
          - `multiplier` number — Base for exponential backoff, e.g., base 2 means that retries will occur after 2, then 4, then 8 seconds, and so on
          - `codes` number[] — List of http codes that trigger a retry. Leave empty to use the default list of 429, 500, and 503.
          - `enableHeader` boolean — Honor any Retry-After header that specifies a delay (in seconds) or a timestamp after which to retry the request. The delay is limited to 20 seconds, even if the Retry-After header specifies a longer delay. When disabled, all Retry-After headers are ignored.
          - `retryConnectTimeout` boolean — Make a single retry attempt when a connection timeout (ETIMEDOUT) error occurs
          - `retryConnectReset` boolean — Retry request when a connection reset (ECONNRESET) error occurs
        - `description` string
        - `username` string — Username to run Microsoft Graph API call.
        - `password` string — Password to run Microsoft Graph API call.
        - `credentialsSecret` string — Select or create a secret that references your credentials.
        - `clientSecret` string — client_secret to pass in the OAuth request parameter.
        - `tenantId` string — Directory ID (tenant identifier) in Azure Active Directory.
        - `clientId` string — client_id to pass in the OAuth request parameter.
        - `resource` string — Resource to pass in the OAuth request parameter.
        - `planType` 'enterprise_gcc' | 'gcc' | 'gcc_high' | 'dod' — Office 365 subscription plan for your organization, typically Office 365 Enterprise
        - `textSecret` string — Select or create a secret that references your client_secret to pass in the OAuth request parameter.
        - `certOptions` CertOptionsType
          - `certificateName` string — The name of the predefined certificate.
          - `privKeyPath` string, required — Path to the private key to use. Key should be in PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt the private key.
          - `certPath` string, required — Path to the certificate to use. Certificate should be in PEM format. Can reference $ENV_VARS.
        - `__template_url` string — Binds 'url' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'url' at runtime.
        - `__template_tenantId` string — Binds 'tenantId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'tenantId' at runtime.
        - `__template_clientId` string — Binds 'clientId' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'clientId' at runtime.
        - `__template_resource` string — Binds 'resource' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'resource' at runtime.
      - InputEventhub
        - `id` string — Unique ID for this input
        - `type` 'eventhub', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `brokers` string[], required — List of Event Hubs Kafka brokers to connect to (example: yourdomain.servicebus.windows.net:9093). The hostname can be found in the host portion of the primary or secondary connection string in Shared Access Policies.
        - `topics` string[], required — The name of the Event Hub (Kafka topic) to subscribe to. Warning: To optimize performance, Cribl suggests subscribing each Event Hubs Source to only a single topic.
        - `groupId` string — The consumer group this instance belongs to. Default is 'Cribl'.
        - `fromBeginning` boolean — Start reading from earliest available data; relevant only during initial subscription
        - `connectionTimeout` number — Maximum time to wait for a connection to complete successfully
        - `requestTimeout` number — Maximum time to wait for Kafka to respond to a request
        - `maxRetries` number — If messages are failing, you can set the maximum number of retries as high as 100 to prevent loss of data
        - `maxBackOff` number — The maximum wait time for a retry, in milliseconds. Default (and minimum) is 30,000 ms (30 seconds); maximum is 180,000 ms (180 seconds).
        - `initialBackoff` number — Initial value used to calculate the retry, in milliseconds. Maximum is 600,000 ms (10 minutes).
        - `backoffRate` number — Set the backoff multiplier (2-20) to control the retry frequency for failed messages. For faster retries, use a lower multiplier. For slower retries with more delay between attempts, use a higher multiplier. The multiplier is used in an exponential backoff formula; see the Kafka [documentation](https://kafka.js.org/docs/retry-detailed) for details.
        - `authenticationTimeout` number — Maximum time to wait for Kafka to respond to an authentication request
        - `reauthenticationThreshold` number — Specifies a time window during which @{product} can reauthenticate if needed. Creates the window measuring backward from the moment when credentials are set to expire.
        - `sasl` AuthenticationType1 — Authentication parameters to use when connecting to brokers. Using TLS is highly recommended.
          - `disabled` boolean, required
          - `authType` 'manual' | 'secret' — Enter password directly, or select a stored secret
          - `password` string — Connection-string primary key, or connection-string secondary key, from the Event Hubs workspace
          - `textSecret` string — Select or create a stored text secret
          - `mechanism` 'plain' | 'oauthbearer'
          - `username` string — The username for authentication. For Event Hubs, this should always be $ConnectionString.
          - `clientSecretAuthType` 'manual' | 'secret' | 'certificate'
          - `clientSecret` string — client_secret to pass in the OAuth request parameter
          - `clientTextSecret` string — Select or create a stored text secret
          - `certificateName` string — Select or create a stored certificate
          - `certPath` string
          - `privKeyPath` string
          - `passphrase` string
          - `oauthEndpoint` 'https://login.microsoftonline.com' | 'https://login.microsoftonline.us' | 'https://login.partner.microsoftonline.cn' — Endpoint used to acquire authentication tokens from Azure
          - `clientId` string — client_id to pass in the OAuth request parameter
          - `tenantId` string — Directory ID (tenant identifier) in Azure Active Directory
          - `scope` string — Scope to pass in the OAuth request parameter
        - `tls` TlsSettingsClientSideType
          - `disabled` boolean, required
          - `rejectUnauthorized` boolean — Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (such as the system's)
        - `sessionTimeout` number — Timeout (session.timeout.ms in Kafka domain) used to detect client failures when using Kafka's group-management facilities. If the client sends no heartbeats to the broker before the timeout expires, the broker will remove the client from the group and initiate a rebalance. Value must be lower than rebalanceTimeout. See details [here](https://github.com/Azure/azure-event-hubs-for-kafka/blob/master/CONFIGURATION.md).
        - `rebalanceTimeout` number — Maximum allowed time (rebalance.timeout.ms in Kafka domain) for each worker to join the group after a rebalance begins. If the timeout is exceeded, the coordinator broker will remove the worker from the group. See [Recommended configurations](https://github.com/Azure/azure-event-hubs-for-kafka/blob/master/CONFIGURATION.md).
        - `heartbeatInterval` number — Expected time (heartbeat.interval.ms in Kafka domain) between heartbeats to the consumer coordinator when using Kafka's group-management facilities. Value must be lower than sessionTimeout and typically should not exceed 1/3 of the sessionTimeout value. See [Recommended configurations](https://github.com/Azure/azure-event-hubs-for-kafka/blob/master/CONFIGURATION.md).
        - `autoCommitInterval` number — How often to commit offsets. If both this and Offset commit threshold are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `autoCommitThreshold` number — How many events are needed to trigger an offset commit. If both this and Offset commit interval are set, @{product} commits offsets when either condition is met. If both are empty, @{product} commits offsets after each batch.
        - `maxBytesPerPartition` number — Maximum amount of data that Kafka will return per partition, per fetch request. Must equal or exceed the maximum message size (maxBytesPerPartition) that Kafka is configured to allow. Otherwise, @{product} can get stuck trying to retrieve messages. Defaults to 1048576 (1 MB).
        - `maxBytes` number — Maximum number of bytes that Kafka will return per fetch request. Defaults to 10485760 (10 MB).
        - `maxSocketErrors` number — Maximum number of network errors before the consumer re-creates a socket
        - `minimizeDuplicates` boolean — Minimize duplicate events by starting only one consumer for each topic partition
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
      - InputExec
        - `id` string — Unique ID for this input
        - `type` 'exec', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `command` string, required — Command to execute; supports Bourne shell (or CMD on Windows) syntax
        - `script` string — Optional script content to pipe into the command's stdin. The stdin stream is closed after the script is written.
        - `retries` number — Maximum number of retry attempts in the event that the command fails
        - `scheduleType` 'interval' | 'cronSchedule' — Select a schedule type; either an interval (in seconds) or a cron-style schedule.
        - `breakerRulesets` string[] — A list of event-breaking rulesets that will be applied, in order, to the input data stream
        - `staleChannelFlushMs` number — How long (in milliseconds) the Event Breaker will wait for new data to be sent to a specific channel before flushing the data stream out, as is, to the Pipelines
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `interval` number — Interval between command executions in seconds.
        - `cronSchedule` string — Cron schedule to execute the command on.
      - InputFirehose
        - `id` string — Unique ID for this input
        - `type` 'firehose', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `authTokens` string[] — Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted.
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputGooglePubsub
        - `id` string — Unique ID for this input
        - `type` 'google_pubsub', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `topicName` string, required — ID of the topic to receive events from. When Monitor subscription is enabled, any value may be entered.
        - `subscriptionName` string, required — ID of the subscription to use when receiving events. When Monitor subscription is enabled, the fully qualified subscription name must be entered. Example: projects/myProject/subscriptions/mySubscription
        - `monitorSubscription` boolean — Use when the subscription is not created by this Source and topic is not known
        - `createTopic` boolean — Create topic if it does not exist
        - `createSubscription` boolean — Create subscription if it does not exist
        - `region` string — Region to retrieve messages from. Select 'default' to allow Google to auto-select the nearest region. When using ordered delivery, the selected region must be allowed by message storage policy.
        - `googleAuthMethod` 'auto' | 'manual' | 'secret' — Choose Auto to use Google Application Default Credentials (ADC), Manual to enter Google service account credentials directly, or Secret to select or create a stored secret that references Google service account credentials.
        - `serviceAccountCredentials` string — Contents of service account credentials (JSON keys) file downloaded from Google Cloud. To upload a file, click the upload button at this field's upper right.
        - `secret` string — Select or create a stored text secret
        - `maxBacklog` number — If Destination exerts backpressure, this setting limits how many inbound events Stream will queue for processing before it stops retrieving events
        - `concurrency` number — How many streams to pull messages from at one time. Doubling the value doubles the number of messages this Source pulls from the topic (if available), while consuming more CPU and memory. Defaults to 5.
        - `requestTimeout` number — Pull request timeout, in milliseconds
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `orderedDelivery` boolean — Receive events in the order they were added to the queue. The process sending events must have ordering enabled.
        - `__template_topicName` string — Binds 'topicName' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'topicName' at runtime.
        - `__template_subscriptionName` string — Binds 'subscriptionName' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'subscriptionName' at runtime.
        - `__template_region` string — Binds 'region' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'region' at runtime.
      - InputCribl
        - `id` string — Unique ID for this input
        - `type` 'cribl', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `filter` string
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
      - InputCriblTcp
        - `id` string — Unique ID for this input
        - `type` 'cribl_tcp', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveCxn` number — Maximum number of active connections allowed per Worker Process. Use 0 for unlimited.
        - `socketIdleTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. After this time, the connection will be closed. Leave at 0 for no inactive socket monitoring.
        - `socketEndingMaxWait` number — How long the server will wait after initiating a closure for a client to close its end of the connection. If the client doesn't close the connection within this time, the server will forcefully terminate the socket to prevent resource leaks and ensure efficient connection cleanup and system stability. Leave at 0 for no inactive socket monitoring.
        - `socketMaxLifespan` number — The maximum duration a socket can remain open, even if active. This helps manage resources and mitigate issues caused by TCP pinning. Set to 0 to disable.
        - `enableProxyHeader` boolean — Enable if the connection is proxied by a device that supports proxy protocol v1 or v2
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `enableLoadBalancing` boolean — Load balance traffic across all Worker Processes
        - `authTokens` ItemsTypeAuthTokens[] — Shared secrets to be used by connected environments to authorize connections. These tokens should be installed in Cribl TCP destinations in connected environments.
          - `tokenSecret` string, required — Select or create a stored text secret
          - `enabled` boolean
          - `description` string — Optional token description
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputCriblHttp
        - `id` string — Unique ID for this input
        - `type` 'cribl_http', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `authTokens` ItemsTypeAuthTokens[] — Shared secrets to be used by connected environments to authorize connections. These tokens should be installed in Cribl HTTP destinations in connected environments.
          - `tokenSecret` string, required — Select or create a stored text secret
          - `enabled` boolean
          - `description` string — Optional token description
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
      - InputCriblLakeHttp
        - `id` string — Unique ID for this input
        - `type` 'cribl_lake_http', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
        - `pq` PqType
          - `mode` 'smart' | 'always' — With Smart mode, PQ will write events to the filesystem only when it detects backpressure from the processing engine. With Always On mode, PQ will always write events directly to the queue before forwarding them to the processing engine.
          - `maxBufferSize` number — The maximum number of events to hold in memory before writing the events to disk
          - `commitFrequency` number — The number of events to send downstream before committing that Stream has read them
          - `maxFileSize` string — The maximum size to store in each queue file before closing and optionally compressing. Enter a numeral with units of KB, MB, etc.
          - `maxSize` string — The maximum disk space that the queue can consume (as an average per Worker Process) before queueing stops. Enter a numeral with units of KB, MB, etc.
          - `path` string — The location for the persistent queue files. To this field's value, the system will append: /<worker-id>/inputs/<input-id>
          - `compress` 'none' | 'gzip' — Codec to use to compress the persisted data
          - `pqControls` object
        - `host` string, required — Address to bind on. Defaults to 0.0.0.0 (all addresses).
        - `port` number, required — Port to listen on
        - `authTokens` string[] — Shared secrets to be provided by any client (Authorization: <token>). If empty, unauthorized access is permitted.
        - `tls` TlsSettingsServerSideType
          - `disabled` boolean
          - `requestCert` boolean — Require clients to present their certificates. Used to perform client authentication using SSL certs.
          - `rejectUnauthorized` boolean — Reject certificates not authorized by a CA in the CA certificate path or by another trusted CA (such as the system's)
          - `commonNameRegex` string — Regex matching allowable common names in peer certificates' subject attribute
          - `certificateName` string — The name of the predefined certificate
          - `privKeyPath` string — Path on server containing the private key to use. PEM format. Can reference $ENV_VARS.
          - `passphrase` string — Passphrase to use to decrypt private key
          - `certPath` string — Path on server containing certificates to use. PEM format. Can reference $ENV_VARS.
          - `caPath` string — Path on server containing CA certificates to use. PEM format. Can reference $ENV_VARS.
          - `minVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
          - `maxVersion` 'TLSv1' | 'TLSv1.1' | 'TLSv1.2' | 'TLSv1.3'
        - `maxActiveReq` number — Maximum number of active requests allowed per Worker Process. Set to 0 for unlimited. Caution: Increasing the limit above the default value, or setting it to unlimited, may degrade performance and reduce throughput.
        - `maxRequestsPerSocket` integer — Maximum number of requests per socket before @{product} instructs the client to close the connection. Default is 0 (unlimited).
        - `enableProxyHeader` boolean — Extract the client IP and port from PROXY protocol v1/v2. When enabled, the X-Forwarded-For header is ignored. Disable to use the X-Forwarded-For header for client IP extraction.
        - `captureHeaders` boolean — Add request headers to events, in the __headers field
        - `activityLogSampleRate` number — How often request activity is logged at the `info` level. A value of 1 would log every request, 10 every 10th request, etc.
        - `requestTimeout` number — How long to wait for an incoming request to complete before aborting it. Use 0 to disable.
        - `socketTimeout` number — How long @{product} should wait before assuming that an inactive socket has timed out. To wait forever, set to 0.
        - `keepAliveTimeout` number — After the last response is sent, @{product} will wait this long for additional data before closing the socket connection. Minimum 1 second, maximum 600 seconds (10 minutes).
        - `enableHealthCheck` boolean — Expose the /cribl_health endpoint, which returns 200 OK when this Source is healthy
        - `ipAllowlistRegex` string — Messages from matched IP addresses will be processed, unless also matched by the denylist
        - `ipDenylistRegex` string — Messages from matched IP addresses will be ignored. This takes precedence over the allowlist.
        - `criblAPI` string — Absolute path on which to listen for the Cribl HTTP API requests. Only _bulk (default /cribl/_bulk) is available. Use empty string to disable.
        - `elasticAPI` string — Absolute path on which to listen for the Elasticsearch API requests. Only _bulk (default /elastic/_bulk) is available. Use empty string to disable.
        - `splunkHecAPI` string — Absolute path on which listen for the Splunk HTTP Event Collector API requests. Use empty string to disable.
        - `splunkHecAcks` boolean
        - `metadata` ItemsTypeMetadata[] — Fields to add to events from this input
          - `name` string, required
          - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
        - `authTokensExt` object[]
          - `token` string, required
          - `description` string
          - `metadata` ItemsTypeMetadata[] — Fields to add to events referencing this token
            - `name` string, required
            - `value` string, required — JavaScript expression to compute field's value, enclosed in quotes or backticks. (Can evaluate to a constant.)
          - `splunkHecMetadata` object
            - `enabled` boolean
            - `defaultDataset` string
            - `allowedIndexesAtToken` string[]
          - `elasticsearchMetadata` object
            - `enabled` boolean
            - `defaultDataset` string
        - `description` string
        - `__template_host` string — Binds 'host' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'host' at runtime.
        - `__template_port` string — Binds 'port' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'port' at runtime.
        - `__template_splunkHecAPI` string — Binds 'splunkHecAPI' to a variable for dynamic value resolution. Set to variable ID (pack-scoped) or 'cribl.'/'edge.' prefixed ID (group-scoped). Variable value overrides 'splunkHecAPI' at runtime.
      - InputTcpjson
        - `id` string — Unique ID for this input
        - `type` 'tcpjson', required
        - `disabled` boolean
        - `pipeline` string — Pipeline to process data from this Source before sending it through the Routes
        - `sendToRoutes` boolean — Select whether to send data to Routes, or directly to Destinations.
        - `environment` string — Optionally, enable this config only on a specified Git branch. If empty, will be enabled everywhere.
        - `pqEnabled` boolean — Use a disk queue to minimize data loss when connected services block. See [Cribl Docs](https://docs.cribl.io/stream/persistent-queues) for PQ defaults (Cribl-managed Cloud Workers) and configuration options (on-prem and hybrid Workers).
        - `streamtags` string[] — Tags for filtering and grouping in @{product}
        - `connections` ItemsTypeConnectionsOptional[] — Direct connections to Destinations, and optionally via a Pipeline or a Pack
          - `pipeline` string
          - `output` string
- … truncated; see the full OpenAPI document linked below

## Other responses

- `401` — Unauthorized
- `500` — Unexpected error

## Changes

- **2026-03-06** `11df16b26c1d` — 1 breaking, 57 warning, 150 info
  - added `#/components/schemas/InputMicrosoftGraph, #/components/schemas/InputOpenai` to the `items/items/` response property `oneOf` list for the response status `200`
  - removed the optional property `items/items/oneOf[#/components/schemas/InputCloudflareHec]/authTokens/items/token` from the response with the `200` status
  - removed the optional property `items/items/oneOf[#/components/schemas/InputCloudflareHec]/enableHealthCheck` from the response with the `200` status
  - removed the optional property `items/items/oneOf[#/components/schemas/InputGrafana]/lokiAuth/authHeaderExpr` from the response with the `200` status
  - …204 more
- **2026-01-24** `84748faee3ef` — 67 breaking, 6 warning, 1704 info
  - the response property `items/items/oneOf[#/components/schemas/InputAppscope]/connections/items/output` became optional for the status `200`
  - the response property `items/items/oneOf[#/components/schemas/InputAzureBlob]/connections/items/output` became optional for the status `200`
  - the response property `items/items/oneOf[#/components/schemas/InputCloudflareHec]/connections/items/output` became optional for the status `200`
  - the response property `items/items/oneOf[#/components/schemas/InputCollection]/connections/items/output` became optional for the status `200`
  - …1773 more
  - …this revision’s changelog is incomplete
- …earlier changes not shown

[Full history](https://skmtc.dev/criblio/apis/cribl-api-reference/changes/system/inputs/:id/get.md)

---

[API](https://skmtc.dev/criblio/apis/cribl-api-reference.md) · [All operations](https://skmtc.dev/criblio/apis/cribl-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/criblio/cribl-api-reference/revisions/11df16b26c1d/schema)