curl --request PATCH \
  --url https://api.cpln.io/org/{name} \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "$drop": [
    "description"
  ],
  "description": "<string>",
  "tags": {},
  "$replace/tags": {},
  "spec": {
    "$drop": [
      "logging"
    ],
    "logging": {
      "$drop": [
        "s3"
      ],
      "s3": {
        "$drop": [
          "bucket"
        ],
        "bucket": "<string>",
        "region": "<string>",
        "prefix": "/",
        "credentials": "<string>"
      },
      "$replace/s3": {
        "bucket": "<string>",
        "region": "<string>",
        "prefix": "/",
        "credentials": "<string>"
      },
      "coralogix": {
        "$drop": [
          "cluster"
        ],
        "cluster": "coralogix.com",
        "credentials": "<string>",
        "app": "<string>",
        "subsystem": "<string>"
      },
      "$replace/coralogix": {
        "cluster": "coralogix.com",
        "credentials": "<string>",
        "app": "<string>",
        "subsystem": "<string>"
      },
      "datadog": {
        "$drop": [
          "host"
        ],
        "host": "http-intake.logs.datadoghq.com",
        "credentials": "<string>"
      },
      "$replace/datadog": {
        "host": "http-intake.logs.datadoghq.com",
        "credentials": "<string>"
      },
      "logzio": {
        "$drop": [
          "listenerHost"
        ],
        "listenerHost": "listener.logz.io",
        "credentials": "<string>"
      },
      "$replace/logzio": {
        "listenerHost": "listener.logz.io",
        "credentials": "<string>"
      },
      "elastic": {
        "$drop": [
          "aws"
        ],
        "aws": {
          "$drop": [
            "host"
          ],
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "$replace/aws": {
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "elasticCloud": {
          "$drop": [
            "index"
          ],
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "$replace/elasticCloud": {
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "generic": {
          "$drop": [
            "host"
          ],
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        },
        "$replace/generic": {
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        }
      },
      "$replace/elastic": {
        "aws": {
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "elasticCloud": {
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "generic": {
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        }
      },
      "cloudWatch": {
        "$drop": [
          "region"
        ],
        "region": "us-east-1",
        "credentials": "<string>",
        "retentionDays": 123,
        "groupName": "<string>",
        "streamName": "<string>",
        "extractFields": {},
        "$replace/extractFields": {}
      },
      "$replace/cloudWatch": {
        "region": "us-east-1",
        "credentials": "<string>",
        "retentionDays": 123,
        "groupName": "<string>",
        "streamName": "<string>",
        "extractFields": {}
      },
      "fluentd": {
        "$drop": [
          "host"
        ],
        "host": "<string>",
        "port": 123
      },
      "$replace/fluentd": {
        "host": "<string>",
        "port": 123
      },
      "stackdriver": {
        "$drop": [
          "credentials"
        ],
        "credentials": "<string>",
        "location": "us-east1"
      },
      "$replace/stackdriver": {
        "credentials": "<string>",
        "location": "us-east1"
      },
      "syslog": {
        "$drop": [
          "host"
        ],
        "host": "<string>",
        "port": 123,
        "mode": "tcp",
        "format": "rfc5424",
        "severity": 123
      },
      "$replace/syslog": {
        "host": "<string>",
        "port": 123,
        "mode": "tcp",
        "format": "rfc5424",
        "severity": 123
      }
    },
    "$replace/logging": {
      "s3": {
        "bucket": "<string>",
        "region": "<string>",
        "prefix": "/",
        "credentials": "<string>"
      },
      "coralogix": {
        "cluster": "coralogix.com",
        "credentials": "<string>",
        "app": "<string>",
        "subsystem": "<string>"
      },
      "datadog": {
        "host": "http-intake.logs.datadoghq.com",
        "credentials": "<string>"
      },
      "logzio": {
        "listenerHost": "listener.logz.io",
        "credentials": "<string>"
      },
      "elastic": {
        "aws": {
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "elasticCloud": {
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "generic": {
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        }
      },
      "cloudWatch": {
        "region": "us-east-1",
        "credentials": "<string>",
        "retentionDays": 123,
        "groupName": "<string>",
        "streamName": "<string>",
        "extractFields": {}
      },
      "fluentd": {
        "host": "<string>",
        "port": 123
      },
      "stackdriver": {
        "credentials": "<string>",
        "location": "us-east1"
      },
      "syslog": {
        "host": "<string>",
        "port": 123,
        "mode": "tcp",
        "format": "rfc5424",
        "severity": 123
      }
    },
    "extraLogging": [
      {
        "s3": {
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "coralogix": {
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "datadog": {
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "logzio": {
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "elastic": {
          "aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "cloudWatch": {
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {}
        },
        "fluentd": {
          "host": "<string>",
          "port": 123
        },
        "stackdriver": {
          "credentials": "<string>",
          "location": "us-east1"
        },
        "syslog": {
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        }
      }
    ],
    "$drop/extraLogging": [
      "<string>"
    ],
    "$append/extraLogging": [
      {
        "s3": {
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "coralogix": {
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "datadog": {
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "logzio": {
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "elastic": {
          "aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "cloudWatch": {
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {}
        },
        "fluentd": {
          "host": "<string>",
          "port": 123
        },
        "stackdriver": {
          "credentials": "<string>",
          "location": "us-east1"
        },
        "syslog": {
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        }
      }
    ],
    "$patch/extraLogging": [
      {
        "$drop": [
          "s3"
        ],
        "s3": {
          "$drop": [
            "bucket"
          ],
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "$replace/s3": {
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "coralogix": {
          "$drop": [
            "cluster"
          ],
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "$replace/coralogix": {
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "datadog": {
          "$drop": [
            "host"
          ],
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "$replace/datadog": {
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "logzio": {
          "$drop": [
            "listenerHost"
          ],
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "$replace/logzio": {
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "elastic": {
          "$drop": [
            "aws"
          ],
          "aws": {
            "$drop": [
              "host"
            ],
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "$replace/aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "$drop": [
              "index"
            ],
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "$replace/elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "$drop": [
              "host"
            ],
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          },
          "$replace/generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "$replace/elastic": {
          "aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "cloudWatch": {
          "$drop": [
            "region"
          ],
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {},
          "$replace/extractFields": {}
        },
        "$replace/cloudWatch": {
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {}
        },
        "fluentd": {
          "$drop": [
            "host"
          ],
          "host": "<string>",
          "port": 123
        },
        "$replace/fluentd": {
          "host": "<string>",
          "port": 123
        },
        "stackdriver": {
          "$drop": [
            "credentials"
          ],
          "credentials": "<string>",
          "location": "us-east1"
        },
        "$replace/stackdriver": {
          "credentials": "<string>",
          "location": "us-east1"
        },
        "syslog": {
          "$drop": [
            "host"
          ],
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        },
        "$replace/syslog": {
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        }
      }
    ],
    "$retain/extraLogging": [
      "<string>"
    ],
    "tracing": {
      "$drop": [
        "sampling"
      ],
      "sampling": 123,
      "lightstep": {
        "$drop": [
          "endpoint"
        ],
        "endpoint": "<string>",
        "credentials": "<string>"
      },
      "$replace/lightstep": {
        "endpoint": "<string>",
        "credentials": "<string>"
      },
      "customTags": {},
      "$replace/customTags": {},
      "provider": {
        "$drop": [
          "otel"
        ],
        "otel": {
          "$drop": [
            "endpoint"
          ],
          "endpoint": "<string>"
        },
        "$replace/otel": {
          "endpoint": "<string>"
        },
        "lightstep": {
          "$drop": [
            "endpoint"
          ],
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "$replace/lightstep": {
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "controlplane": {},
        "$replace/controlplane": {}
      },
      "$replace/provider": {
        "otel": {
          "endpoint": "<string>"
        },
        "lightstep": {
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "controlplane": {}
      }
    },
    "$replace/tracing": {
      "sampling": 123,
      "lightstep": {
        "endpoint": "<string>",
        "credentials": "<string>"
      },
      "customTags": {},
      "provider": {
        "otel": {
          "endpoint": "<string>"
        },
        "lightstep": {
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "controlplane": {}
      }
    },
    "sessionTimeoutSeconds": 123,
    "authConfig": {
      "$drop": [
        "domainAutoMembers"
      ],
      "domainAutoMembers": [
        "<string>"
      ],
      "$drop/domainAutoMembers": [
        "<string>"
      ],
      "$append/domainAutoMembers": [
        "<string>"
      ],
      "$retain/domainAutoMembers": [
        "<string>"
      ],
      "samlOnly": true
    },
    "$replace/authConfig": {
      "domainAutoMembers": [
        "<string>"
      ],
      "samlOnly": true
    },
    "observability": {
      "$drop": [
        "logsRetentionDays"
      ],
      "logsRetentionDays": 123,
      "metricsRetentionDays": 123,
      "tracesRetentionDays": 123,
      "defaultAlertEmails": [
        "<string>"
      ],
      "$drop/defaultAlertEmails": [
        "<string>"
      ],
      "$append/defaultAlertEmails": [
        "<string>"
      ],
      "$retain/defaultAlertEmails": [
        "<string>"
      ]
    },
    "$replace/observability": {
      "logsRetentionDays": 123,
      "metricsRetentionDays": 123,
      "tracesRetentionDays": 123,
      "defaultAlertEmails": [
        "<string>"
      ]
    },
    "security": {
      "$drop": [
        "threatDetection"
      ],
      "threatDetection": {
        "$drop": [
          "enabled"
        ],
        "enabled": true,
        "minimumSeverity": "warning",
        "syslog": {
          "$drop": [
            "transport"
          ],
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        },
        "$replace/syslog": {
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        }
      },
      "$replace/threatDetection": {
        "enabled": true,
        "minimumSeverity": "warning",
        "syslog": {
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        }
      }
    },
    "$replace/security": {
      "threatDetection": {
        "enabled": true,
        "minimumSeverity": "warning",
        "syslog": {
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        }
      }
    }
  },
  "$replace/spec": {
    "logging": {
      "s3": {
        "bucket": "<string>",
        "region": "<string>",
        "prefix": "/",
        "credentials": "<string>"
      },
      "coralogix": {
        "cluster": "coralogix.com",
        "credentials": "<string>",
        "app": "<string>",
        "subsystem": "<string>"
      },
      "datadog": {
        "host": "http-intake.logs.datadoghq.com",
        "credentials": "<string>"
      },
      "logzio": {
        "listenerHost": "listener.logz.io",
        "credentials": "<string>"
      },
      "elastic": {
        "aws": {
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "elasticCloud": {
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "generic": {
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        }
      },
      "cloudWatch": {
        "region": "us-east-1",
        "credentials": "<string>",
        "retentionDays": 123,
        "groupName": "<string>",
        "streamName": "<string>",
        "extractFields": {}
      },
      "fluentd": {
        "host": "<string>",
        "port": 123
      },
      "stackdriver": {
        "credentials": "<string>",
        "location": "us-east1"
      },
      "syslog": {
        "host": "<string>",
        "port": 123,
        "mode": "tcp",
        "format": "rfc5424",
        "severity": 123
      }
    },
    "extraLogging": [
      {
        "s3": {
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "coralogix": {
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "datadog": {
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "logzio": {
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "elastic": {
          "aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "cloudWatch": {
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {}
        },
        "fluentd": {
          "host": "<string>",
          "port": 123
        },
        "stackdriver": {
          "credentials": "<string>",
          "location": "us-east1"
        },
        "syslog": {
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        }
      }
    ],
    "tracing": {
      "sampling": 123,
      "lightstep": {
        "endpoint": "<string>",
        "credentials": "<string>"
      },
      "customTags": {},
      "provider": {
        "otel": {
          "endpoint": "<string>"
        },
        "lightstep": {
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "controlplane": {}
      }
    },
    "sessionTimeoutSeconds": 123,
    "authConfig": {
      "domainAutoMembers": [
        "<string>"
      ],
      "samlOnly": true
    },
    "observability": {
      "logsRetentionDays": 123,
      "metricsRetentionDays": 123,
      "tracesRetentionDays": 123,
      "defaultAlertEmails": [
        "<string>"
      ]
    },
    "security": {
      "threatDetection": {
        "enabled": true,
        "minimumSeverity": "warning",
        "syslog": {
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        }
      }
    }
  }
}
'

{
  "id": "<string>",
  "kind": "<string>",
  "version": 123,
  "description": "<string>",
  "tags": {},
  "created": "2023-11-07T05:31:56Z",
  "lastModified": "2023-11-07T05:31:56Z",
  "links": [
    {
      "rel": "<string>",
      "href": "<string>"
    }
  ],
  "name": "<string>",
  "spec": {
    "logging": {
      "s3": {
        "bucket": "<string>",
        "region": "<string>",
        "prefix": "/",
        "credentials": "<string>"
      },
      "coralogix": {
        "cluster": "coralogix.com",
        "credentials": "<string>",
        "app": "<string>",
        "subsystem": "<string>"
      },
      "datadog": {
        "host": "http-intake.logs.datadoghq.com",
        "credentials": "<string>"
      },
      "logzio": {
        "listenerHost": "listener.logz.io",
        "credentials": "<string>"
      },
      "elastic": {
        "aws": {
          "host": "<string>",
          "port": 123,
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "region": "<string>"
        },
        "elasticCloud": {
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "cloudId": "<string>"
        },
        "generic": {
          "host": "<string>",
          "port": 123,
          "path": "<string>",
          "index": "<string>",
          "type": "<string>",
          "credentials": "<string>",
          "username": "<string>",
          "password": "<string>"
        }
      },
      "cloudWatch": {
        "region": "us-east-1",
        "credentials": "<string>",
        "retentionDays": 123,
        "groupName": "<string>",
        "streamName": "<string>",
        "extractFields": {}
      },
      "fluentd": {
        "host": "<string>",
        "port": 123
      },
      "stackdriver": {
        "credentials": "<string>",
        "location": "us-east1"
      },
      "syslog": {
        "host": "<string>",
        "port": 123,
        "mode": "tcp",
        "format": "rfc5424",
        "severity": 123
      }
    },
    "extraLogging": [
      {
        "s3": {
          "bucket": "<string>",
          "region": "<string>",
          "prefix": "/",
          "credentials": "<string>"
        },
        "coralogix": {
          "cluster": "coralogix.com",
          "credentials": "<string>",
          "app": "<string>",
          "subsystem": "<string>"
        },
        "datadog": {
          "host": "http-intake.logs.datadoghq.com",
          "credentials": "<string>"
        },
        "logzio": {
          "listenerHost": "listener.logz.io",
          "credentials": "<string>"
        },
        "elastic": {
          "aws": {
            "host": "<string>",
            "port": 123,
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "region": "<string>"
          },
          "elasticCloud": {
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "cloudId": "<string>"
          },
          "generic": {
            "host": "<string>",
            "port": 123,
            "path": "<string>",
            "index": "<string>",
            "type": "<string>",
            "credentials": "<string>",
            "username": "<string>",
            "password": "<string>"
          }
        },
        "cloudWatch": {
          "region": "us-east-1",
          "credentials": "<string>",
          "retentionDays": 123,
          "groupName": "<string>",
          "streamName": "<string>",
          "extractFields": {}
        },
        "fluentd": {
          "host": "<string>",
          "port": 123
        },
        "stackdriver": {
          "credentials": "<string>",
          "location": "us-east1"
        },
        "syslog": {
          "host": "<string>",
          "port": 123,
          "mode": "tcp",
          "format": "rfc5424",
          "severity": 123
        }
      }
    ],
    "tracing": {
      "sampling": 123,
      "lightstep": {
        "endpoint": "<string>",
        "credentials": "<string>"
      },
      "customTags": {},
      "provider": {
        "otel": {
          "endpoint": "<string>"
        },
        "lightstep": {
          "endpoint": "<string>",
          "credentials": "<string>"
        },
        "controlplane": {}
      }
    },
    "sessionTimeoutSeconds": 123,
    "authConfig": {
      "domainAutoMembers": [
        "<string>"
      ],
      "samlOnly": true
    },
    "observability": {
      "logsRetentionDays": 123,
      "metricsRetentionDays": 123,
      "tracesRetentionDays": 123,
      "defaultAlertEmails": [
        "<string>"
      ]
    },
    "security": {
      "threatDetection": {
        "enabled": true,
        "minimumSeverity": "warning",
        "syslog": {
          "transport": "tcp",
          "host": "<string>",
          "port": 123
        }
      }
    }
  },
  "status": {
    "accountLink": "<string>",
    "active": true,
    "endpointPrefix": "<string>"
  }
}