{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/saas-security-api-log-forwarding-settings-structure.json",
  "name": "LogForwardingSettings",
  "description": "LogForwardingSettings schema from Palo Alto Networks SaaS Security API",
  "type": "object",
  "properties": {
    "enabled": {
      "type": "boolean",
      "description": "Whether log forwarding is globally enabled."
    },
    "destinations": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "type": {
            "type": "string",
            "description": "Forwarding destination type.",
            "enum": [
              "syslog",
              "https",
              "s3",
              "splunk"
            ]
          },
          "name": {
            "type": "string",
            "description": "Destination name."
          },
          "enabled": {
            "type": "boolean",
            "description": "Whether this destination is active."
          },
          "log_types": {
            "type": "array",
            "description": "Log types forwarded to this destination.",
            "items": {
              "type": "string"
            }
          }
        }
      }
    }
  }
}