Skip to content

xcsh_log_receiver (Data Source)

Retrieves information about new Log Receiver object in F5 Distributed Cloud. This is a read-only data source.

~> Note: For more information, see the Log Receiver API documentation.

# LogReceiver Data Source Example
terraform {
required_version = ">= 1.0"
required_providers {
xcsh = {
source = "f5-sales-demo/xcsh"
version = ">= 0.1.0"
}
}
}
# Look up an existing LogReceiver by name
data "xcsh_log_receiver" "example" {
name = "example-log-receiver"
namespace = "staging"
}
output "log_receiver_id" {
value = data.xcsh_log_receiver.example.id
}

-> Syntax Rule: This provider uses OneOf groups for mutually exclusive options. Fields documented as “Optional Block” use block syntax field_name { ... }. Empty OneOf object attributes use field_name = {}; conditional selection uses condition ? {} : null. Boolean attributes (such as add_hsts and http_redirect) use = true or = false.

🔶 High Risk Operations — Some operations on this resource have high danger level. Destructive operations may require confirmation.

• name - Required String
Name of the LogReceiver

• namespace - Required String
Namespace where the LogReceiver exists

In addition to all arguments above, the following attributes are exported:

• annotations - Optional Map
Annotations applied to this resource

• description - Optional String
Description of the LogReceiver

• id - Optional String
Unique identifier for the resource

• labels - Optional Map
Labels applied to this resource

• site_local - Optional String
Enable this option

• syslog - Optional String
Syslog Server Configuration. Configuration for syslog server


A syslog block supports the following:

• syslog_rfc5424 - Optional Number
Select RFC5424 syslog format and maximum message length

• tcp_server - Optional String
TCP Server name and Port Number. Name and port number for a TCP server

• tls_server - Optional String
TLS config for client of discovery service

• udp_server - Optional String
UDP Server Name and Port Number. Name and port number for a UDP server

A tcp_server block (within syslog) supports the following:

• port - Optional Number
Port Number. Port number used for communication

• server_name - Optional String
Server name is fully qualified domain name or IP address of the server

A tls_server block (within syslog) supports the following:

• default_https_port - Optional Object
Enable this option

• default_syslog_tls_port - Optional Object
Enable this option

• mtls_disabled - Optional Object
Enable this option

• mtls_enable - Optional String
Configuration parameter for mTLS enable

• port - Optional Number
Custom port number used for communication

• server_name - Optional String
ServerName is passed to the server for SNI and is used in the client to check server certificates against

• trusted_ca_url - Optional String
The URL or value for trusted Server CA certificate or certificate chain Certificates in PEM format including the PEM headers

• volterra_ca - Optional Object
Configuration parameter for volterra CA

A default_https_port block (within syslog.tls_server) supports the following:

A default_syslog_tls_port block (within syslog.tls_server) supports the following:

A mtls_disabled block (within syslog.tls_server) supports the following:

A mtls_enable block (within syslog.tls_server) supports the following:

• certificate - Optional String
Client certificate is PEM-encoded certificate or certificate-chain

• key_url - Optional String
SecretType is used in an object to indicate a sensitive/confidential field

A key_url block (within syslog.tls_server.mtls_enable) supports the following:

• blindfold_secret_info - Optional String
BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management

• clear_secret_info - Optional String
ClearSecretInfoType specifies information about the Secret that is not encrypted

Syslog TLS Server mTLS Enable Key URL Blindfold Secret Info

Section titled “Syslog TLS Server mTLS Enable Key URL Blindfold Secret Info”

Deeply nested Info block collapsed for readability.

Syslog TLS Server mTLS Enable Key URL Clear Secret Info

Section titled “Syslog TLS Server mTLS Enable Key URL Clear Secret Info”

Deeply nested Info block collapsed for readability.

A volterra_ca block (within syslog.tls_server) supports the following:

An udp_server block (within syslog) supports the following:

• port - Optional Number
Port Number. Port number used for communication

• server_name - Optional String
Server name is fully qualified domain name or IP address of the server


The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.

Object Reference {#common-object-reference}

Section titled “Object Reference {#common-object-reference}”

Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format tenant/namespace/name.

FieldTypeDescription
nameStringName of the referenced object
namespaceStringNamespace containing the referenced object
tenantStringTenant of the referenced object (system-managed)

Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.

ValueDescription
LOWER_CASEConvert to lowercase
UPPER_CASEConvert to uppercase
BASE64_DECODEDecodebase64 content
NORMALIZE_PATHNormalize URL path
REMOVE_WHITESPACERemove whitespace characters
URL_DECODEDecode URL-encoded characters
TRIM_LEFTTrim leading whitespace
TRIM_RIGHTTrim trailing whitespace
TRIMTrim both leading and trailing whitespace

HTTP methods used for request matching.

ValueDescription
ANYMatch any HTTP method
GETHTTP GET request
HEADHTTP HEAD request
POSTHTTP POST request
PUTHTTP PUT request
DELETEHTTP DELETE request
CONNECTHTTP CONNECT request
OPTIONSHTTP OPTIONS request
TRACEHTTP TRACE request
PATCHHTTP PATCH request
COPYHTTP COPY request (WebDAV)

TLS Fingerprints {#common-tls-fingerprints}

Section titled “TLS Fingerprints {#common-tls-fingerprints}”

TLS fingerprint categories for malicious client detection.

ValueDescription
TLS_FINGERPRINT_NONENo fingerprint matching
ANY_MALICIOUS_FINGERPRINTMatch any known malicious fingerprint
ADWAREAdware-associated fingerprints
DRIDEXDridex malware fingerprints
GOOTKITGootkit malware fingerprints
RANSOMWARERansomware-associated fingerprints
TRICKBOTTrickbot malware fingerprints

IP Threat Categories {#common-ip-threat-categories}

Section titled “IP Threat Categories {#common-ip-threat-categories}”

IP address threat categories for security filtering.

ValueDescription
SPAM_SOURCESKnown spam sources
WINDOWS_EXPLOITSWindows exploit sources
WEB_ATTACKSWeb attack sources
BOTNETSKnown botnet IPs
SCANNERSNetwork scanner IPs
REPUTATIONPoor reputation IPs
PHISHINGPhishing-related IPs
PROXYAnonymous proxy IPs
MOBILE_THREATSMobile threat sources
TOR_PROXYTor exit nodes
DENIAL_OF_SERVICEDoS attack sources
NETWORKKnown bad network ranges