types

package

Go to main page

Versions in this module

v3

v3.8.32

May 20, 2024

v3.8.31

May 3, 2024

Changes in this version

type IdKitState

+ WriteAccess Access

type KitConfig

+ InstallationWriteAccess Access

type KitManifest

+ WriteAccess Access

type Playbook

+ WriteAccess Access

+ type SearchAgentCheckin struct

+ LastCheckin string

+ SearchAgentIP string

+ SearchAgentUUID string

+ Warning bool

type SearchMacro

+ WriteAccess Access

v3.8.30

Apr 3, 2024

Changes in this version

type ScheduledSearch

+ func FindMostRelevantAutomation(ud UserDetails, guid uuid.UUID, automations []ScheduledSearch) (result ScheduledSearch, ok bool)

v3.8.29

Mar 15, 2024

Changes in this version

type AlertDefinition

+ Can Actions

+ WriteAccess Access

type ScheduledSearch

+ WriteAccess Access

type SearchCtrlStatus

+ EffectiveQuery string

+ EndRange time.Time

+ Import ImportInfo

+ LaunchInfo SearchLaunchInfo

+ NoHistory bool

+ StartRange time.Time

+ UserQuery string

type SearchLaunchInfo

+ Started time.Time

v3.8.28

Feb 9, 2024

Changes in this version

+ type Access struct

+ GIDs []int32

+ Global bool

+ type Actions struct

+ Delete bool

+ Modify bool

+ Share bool

type Thing

+ WriteAccess Access

type ThingHeader

+ WriteAccess Access

type UserFileDetails

+ WriteAccess Access

type WireSearchLibrary

+ Can Actions

v3.8.27

Jan 24, 2024

Changes in this version

type IngestStats

+ BytesHourTail [24]uint64

+ BytesMinuteTail [60]uint64

+ BytesPerSecond float64

+ EntriesHourTail [24]uint64

+ EntriesMinuteTail [60]uint64

+ EntriesPerSecond float64

type RawResponse

+ ContainsBinaryEntries bool

type WireSearchLibrary

+ Updated time.Time

type WireUserFile

+ Updated time.Time

v3.8.26

Nov 30, 2023

Changes in this version

+ const LaunchMethodDashboard

+ const LaunchMethodDirectQuery

+ const LaunchMethodFlow

+ const LaunchMethodManual

+ const LaunchMethodScheduledSearch

+ const LaunchMethodScript

type AlertDefinition

+ SaveSearchDuration int32

+ SaveSearchEnabled bool

+ type SaveSearchPatch struct

+ Name string

+ Notes string

+ func (p SaveSearchPatch) GetMetadata() json.RawMessage

+ func (p SaveSearchPatch) MergeLaunchInfo(li *SearchLaunchInfo) (changed bool)

type ScheduledSearch

+ SearchReference uuid.UUID

type SearchInfo

+ LaunchInfo SearchLaunchInfo

+ type SearchLaunchInfo struct

+ Expires time.Time

+ Method string

+ Reference string

type StartSearchRequest

+ LaunchInfo SearchLaunchInfo

type StartSearchResponse

+ LaunchInfo SearchLaunchInfo

v3.8.25

Nov 7, 2023

Changes in this version

type AXDefinition

+ Tags []string

+ func (dc *AXDefinition) GetTags() []string

+ type CalendarEntry struct

+ DataIngested uint64

+ Date string

+ EntryCount uint64

+ type CalendarRequest struct

+ End time.Time

+ Start time.Time

+ Wells []string

type EventMetadata

+ AlertActivation string

+ EventIndex int

type IndexerStats

+ ID string

+ type PerWellStorageStats struct

+ Accelerator string

+ Engine string

+ PathCold string

+ PathHot string

+ ShardCountCold uint64

+ ShardCountHot uint64

+ Tags []string

+ WellName string

+ type StorageStats struct

+ CoverageEnd time.Time

+ CoverageStart time.Time

+ DataIngestedCold uint64

+ DataIngestedHot uint64

+ DataStoredCold uint64

+ DataStoredHot uint64

+ EntryCountCold uint64

+ EntryCountHot uint64

type WellInfo

+ ID string

v3.8.24

Oct 12, 2023

Changes in this version

type AlertDefinition

+ Disabled bool

type SearchInfo

+ Background bool

v3.8.23

Sep 25, 2023

Changes in this version

+ const EVENTLOG_LEVEL_DEBUG

+ const EVENTLOG_LEVEL_ERROR

+ const EVENTLOG_LEVEL_INFO

+ const EVENTLOG_LEVEL_WARN

+ const EVENTTYPE_EVENT

+ const EVENTTYPE_LOG

+ type AlertConsumer struct

+ ID string

+ Type AlertConsumerType

+ type AlertConsumerType string

+ const ALERTCONSUMERTYPE_FLOW

+ type AlertConsumerValidateRequest struct

+ Alert AlertDefinition

+ Consumer AlertConsumer

+ type AlertConsumerValidateResponse struct

+ Error string

+ Valid bool

+ type AlertDefinition struct

+ Consumers []AlertConsumer

+ Description string

+ Dispatchers []AlertDispatcher

+ GIDs []int32

+ GUID uuid.UUID

+ Global bool

+ Labels []string

+ LastUpdated time.Time

+ MaxEvents int

+ Name string

+ Schemas AlertSchemas

+ TargetTag string

+ ThingUUID uuid.UUID

+ UID int32

+ UserMetadata map[string]interface{}

+ func (alert *AlertDefinition) JSONMetadata() (json.RawMessage, error)

+ type AlertDispatcher struct

+ ID string

+ Type AlertDispatcherType

+ type AlertDispatcherType string

+ const ALERTDISPATCHERTYPE_SCHEDULEDSEARCH

+ type AlertDispatcherValidateError struct

+ InvalidValue *interface{}

+ Message string

+ Path string

+ type AlertDispatcherValidateRequest struct

+ Dispatcher AlertDispatcher

+ QueryString string

+ Schema AlertSchemas

+ type AlertDispatcherValidateResponse struct

+ Valid bool

+ ValidationErrors []AlertDispatcherValidateError

+ type AlertSchemas struct

+ ActiveSchema string

+ JSON map[string]interface{}

+ OCSF AlertSchemasOcsf

+ Simple []AlertSchemasSimpleItem

+ type AlertSchemasOcsf struct

+ EventClass string

+ Extensions []string

+ Profiles []string

+ type AlertSchemasSimpleItem struct

+ Name string

+ Type string

type Capability

+ const AlertRead

+ const AlertWrite

+ type Event struct

+ Contents map[string]interface{}

+ Metadata EventMetadata

+ Type EventType

+ type EventConsumerInfo struct

+ ID string

+ Labels []string

+ Name string

+ Type AlertConsumerType

+ type EventDispatcherInfo struct

+ EventCount int

+ EventsElided bool

+ ID string

+ Labels []string

+ Name string

+ SearchID string

+ Type AlertDispatcherType

+ type EventLog struct

+ KV map[string]string

+ Level string

+ Message string

+ Trigger Event

+ Type EventType

+ type EventMetadata struct

+ AlertID string

+ AlertLabels []string

+ AlertName string

+ Consumers []EventConsumerInfo

+ Created time.Time

+ Dispatcher EventDispatcherInfo

+ TargetTag string

+ UID int32

+ UserMetadata map[string]interface{}

+ Username string

+ ValidationProblems []ValidationProblem

+ func BuildEventMetadata(created time.Time, ud UserDetails, alertDef AlertDefinition, ...) EventMetadata

+ type EventType string

type FlowParseRequest

+ DebugEvent *Event

type IdKitState

+ GIDs []int32

+ Global bool

type KitBuildRequest

+ Alerts []uuid.UUID

type KitConfig

+ InstallationGroups []int32

type KitManifest

+ GIDs []int32

type KitState

+ InstallationVersion CanonicalVersion

+ type LaunchRequest struct

+ type LaunchResponse struct

+ Info SearchInfo

+ RefreshInterval uint

+ RenderCmd string

+ RenderModule string

+ SearchID string

+ SearchSessionID uuid.UUID

+ type OverviewStats struct

+ EntryCountValid bool

+ Finished bool

+ LimitDroppedRange TimeRange

+ OverLimit bool

+ SearchPosition entry.Timestamp

+ Stats []OverviewStatSet

type ScheduledSearch

+ DebugEvent *Event

+ TimeframeOffset int64

+ type SearchSessionIntervalUpdate struct

+ Interval uint

+ type ValidationProblem struct

+ Error string

+ Name string

+ Type string

v3.8.22

Jun 30, 2023

Changes in this version

+ type KitItemStatus struct

+ Error string

+ Item KitItem

+ type KitModifyReport struct

+ Statuses []KitItemStatus

+ WasError bool

v3.8.21

Jun 13, 2023

Changes in this version

+ type BackupResponse struct

+ DownloadID string

+ Expiration time.Time

+ type CapabilityExplanation struct

+ Granted bool

+ GroupGrants []GroupDetails

+ UserGrant bool

v3.8.20

May 22, 2023

Changes in this version

+ const CBAC

+ const CBACName

+ const IngestCat

+ const SearchCat

+ type CBACRules struct

+ Capabilities CapabilitySet

+ Tags TagAccess

+ func (abr *CBACRules) CapabilityList() (r []CapabilityDesc)

+ func (abr *CBACRules) CapabilityState() (r CapabilityState)

+ func (abr *CBACRules) HasCapability(c Capability) (allowed bool)

type CapabilitySet

+ Grants []byte

+ func (cs *CapabilitySet) Clear(c Capability) (r bool)

+ func (cs *CapabilitySet) Set(c Capability) (r bool)

type CapabilityState

+ Grants []string

+ func AllCapabilityAccess() CapabilityState

+ func (cs CapabilityState) MarshalJSON() ([]byte, error)

type DeploymentInfo

+ CBACEnabled bool

+ type Features struct

+ CBAC bool

+ NoStats bool

+ Overwatch bool

+ Replication bool

+ SingleSignon bool

+ UnlimitedCPU bool

+ UnlimitedIngest bool

type GroupDetails

+ CBAC CBACRules

type LicenseInfo

+ func (li LicenseInfo) CBACEnabled() bool

+ func (li LicenseInfo) Features() Features

+ func (li LicenseInfo) NoStatsEnabled() bool

+ func (li LicenseInfo) OverwatchEnabled() bool

+ func (li LicenseInfo) UnlimitedCPUEnabled() bool

+ func (li LicenseInfo) UnlimitedIngestEnabled() bool

type TagAccess

+ Grants []string

+ func AllTagAccess() TagAccess

+ func (ta TagAccess) MarshalJSON() ([]byte, error)

type UserDetails

+ CBAC CBACRules

v3.8.19

Apr 13, 2023

v3.8.18

Mar 20, 2023

Changes in this version

+ const ActionablesCat

+ const AutomationsCat

+ const DashboardsCat

+ const ExtractorsCat

+ const FilesCat

+ const KitsCat

+ const MacrosCat

+ const NotificationsCat

+ const PlaybooksCat

+ const QueryLibraryCat

+ const ResourcesCat

+ const SearchAndDataCat

+ const SecretsCat

+ const SystemAndStatsCat

+ const TemplatesCat

+ const TokensCat

+ const UsersAndGroupsCat

+ type BackupConfig struct

+ IncludeSS bool

+ OmitSensitive bool

+ Password string

type Capability

+ func (c Capability) Category() CapabilityCategory

+ type CapabilityCategory string

type CapabilityDesc

+ Category CapabilityCategory

v3.8.17

Feb 16, 2023

Changes in this version

type DiskStats

+ ID string

type IngestStats

+ Missing []ingest.IngesterState

type ModuleStatsUpdate

+ func (sms *ModuleStatsUpdate) Add(v ModuleStatsUpdate)

v3.8.16

Jan 5, 2023

Changes in this version

type ChartableValueSet

+ func (cvs *ChartableValueSet) Sort() error

+ func (cvs *ChartableValueSet) SortByValue() error

type FlowNodeResult

+ ID int

+ Type string

+ type ScheduledError struct

+ Error string

+ Timestamp time.Time

type ScheduledSearch

+ ErrorHistory []ScheduledError

v3.8.15

Dec 2, 2022

v3.8.14

Nov 3, 2022

Changes in this version

type GUISettings

+ CloudMode bool

v3.8.13

Oct 14, 2022

Changes in this version

type ScheduledSearch

+ BackfillEnabled bool

v3.8.12

Sep 23, 2022

Changes in this version

type ExploreResult

+ WordOffsets []WordOffset

+ type LicenseUsage struct

+ Entries uint64

+ Error error

+ History []LicenseUsageBucket

+ Quota uint64

+ Unlimited bool

+ Used uint64

+ type LicenseUsageBucket struct

+ Count uint64

+ End time.Time

+ Size uint64

+ Start time.Time

+ type LicenseUsageReport struct

+ Indexers map[string]LicenseUsage

+ Unlimited bool

+ type WordOffset [2]int

v3.8.11

Aug 29, 2022

v3.8.10

Jul 28, 2022

v3.8.9

Jun 30, 2022

v3.8.8

Jun 14, 2022

Changes in this version

type Capability

+ const SecretRead

+ const SecretWrite

+ type ExploreRequest struct

+ End int64

+ Start int64

type GUISettings

+ MaxJsonRequestSize uint64

+ type Secret struct

+ Created time.Time

+ Desc string

+ Global bool

+ Groups []int32

+ ID uuid.UUID

+ Name string

+ UID int32

+ type SecretCreate struct

+ Desc string

+ Global bool

+ Groups []int32

+ Name string

+ Value string

+ type SecretFull struct

+ Value string

type ShardInfo

+ Stored uint64

v3.8.7

May 19, 2022

Changes in this version

type HostSysStats

+ Iowait float64

+ LoadAverage load.AvgStat

type KitBuildRequest

+ Flows []int32

v3.8.6

Apr 6, 2022

Changes in this version

+ const DefaultAllow

+ const DefaultDeny

+ const Fractional

+ const REQ_GET_RAW_ENTRIES

+ const RESP_GET_RAW_ENTRIES

+ const SEQ_NODE_NOT_EXECUTED

+ const TemplateFullUserName

+ const TemplateReadOnlyName

+ const TokenHeader

+ func AddCapability(b []byte, cp Capability) (r []byte, err error)

+ func CapabilityStringList() []string

+ func CheckCapability(b []byte, c Capability) (r bool)

+ func CheckUserCapabilityAccess(ud *UserDetails, c Capability) (allowed bool)

+ func EncodeCapabilities(caps []Capability) (b []byte, err error)

+ func RemoveCapability(b []byte, c Capability) (r bool)

+ func ValidateCapabilities(cps []Capability) (err error)

+ type ABACRules struct

+ Capabilities CapabilitySet

+ Tags TagAccess

+ func (abr *ABACRules) CapabilityList() (r []CapabilityDesc)

+ func (abr *ABACRules) CapabilityState() (r CapabilityState)

+ func (abr *ABACRules) HasCapability(c Capability) (allowed bool)

type BaseResponse

+ func (br BaseResponse) Err() error

type Capability

+ func CapabilityList() []Capability

+ func (c Capability) Valid() bool

type CapabilityDesc

+ func CapabilityDescriptions() (r []CapabilityDesc)

+ func CreateUserCapabilityList(ud *UserDetails) (r []CapabilityDesc)

+ type CapabilitySet struct

+ Default DefaultAccessRule

+ Overrides []byte

+ func (cs *CapabilitySet) CapabilityList() (r []CapabilityDesc)

+ func (cs *CapabilitySet) ClearOverride(c Capability) (r bool)

+ func (cs *CapabilitySet) SetOverride(c Capability) (r bool)

+ func (cs CapabilitySet) Has(c Capability) bool

+ func (cs CapabilitySet) IsSet(c Capability) bool

+ type CapabilityState struct

+ Default DefaultAccessRule

+ Overrides []string

+ func (st CapabilityState) CapabilityList() (lst []CapabilityDesc, err error)

+ func (st CapabilityState) CapabilitySet() (cs CapabilitySet, err error)

type CapabilityTemplate

+ func TemplateList() []CapabilityTemplate

+ func (ct CapabilityTemplate) CapabilityState() (s CapabilityState)

+ type DefaultAccessRule bool

+ func (dtr DefaultAccessRule) String() string

type DeploymentInfo

+ ABACEnabled bool

type EnumeratedPair

+ func (ep EnumeratedPair) String() string

+ type ErrorObject struct

+ Err string

+ Info string

type FlowNodeResult

+ Sequence int

type FlowParseResponse

+ ErrorNode int

+ Failures map[int]NodeParseFailure

+ InitialPayload map[string]interface{}

type GroupDetails

+ ABAC ABACRules

+ type NodeParseError struct

+ Err string

+ Field string

+ func (f NodeParseError) Error() string

+ func (f NodeParseError) String() string

+ type NodeParseFailure struct

+ Errors []NodeParseError

+ func (f *NodeParseFailure) AddError(e error)

+ func (f *NodeParseFailure) ErrCount() int

+ func (f NodeParseFailure) Error() string

type RawEnumeratedValue

+ func (rev RawEnumeratedValue) String() string

type ScheduledSearch

+ FlowNodeResults map[int]FlowNodeResult

type SearchEntry

+ func (se SearchEntry) String() string

type StartSearchRequest

+ NonTemporal bool

type StartSearchResponse

+ NonTemporal bool

type StringTagEntry

+ func (se StringTagEntry) String() string

type TagAccess

+ Overrides []string

type Token

+ Expires time.Time

+ func (t Token) CapabilitiesString() string

+ func (t Token) Expired() bool

+ func (t Token) ExpiresString() string

type TokenCreate

+ Expires time.Time

type UserDetails

+ ABAC ABACRules

+ func (ud *UserDetails) CapabilityList() []CapabilityDesc

+ func (ud *UserDetails) FilterTags(all []string) (r []string)

+ func (ud *UserDetails) HasCapability(c Capability) bool

+ func (ud *UserDetails) HasTagAccess(tg string) (allowed bool)

v3.8.5

Nov 17, 2021

Changes in this version

+ var ErrUnknownCapability = errors.New("Unknown capability")

type Capability

+ const TokenRead

+ const TokenWrite

+ func (c *Capability) Parse(v string) (err error)

+ func (c Capability) Name() string

+ type FlowNodeResult struct

+ End int64

+ Error error

+ Log string

+ Payload map[string]interface{}

+ Start int64

+ type SSOStatus struct

+ Enabled bool

type ScheduledSearch

+ FlowResults map[int]FlowNodeResult

type SearchAgentConfig

+ Disable_Self_Ingest bool

type StoredBuildRequest

+ BuildDate time.Time

+ type Token struct

+ Capabilities []string

+ Created time.Time

+ Desc string

+ ID uuid.UUID

+ Name string

+ UID int32

+ type TokenCreate struct

+ Capabilities []string

+ Desc string

+ Name string

+ type TokenFull struct

+ Value string

+ type TokenFullWire struct

+ Caps []byte

v3.8.4

Oct 21, 2021

Changes in this version

type ScheduledSearch

+ DebugPayloads map[int]map[string]interface{}

+ LastLogs map[int]string

v3.8.3

Oct 7, 2021

Changes in this version

+ const ScriptAnko

+ const ScriptGo

+ var ErrUnknownScriptLanguage = errors.New("Unknown script language")

type ScheduledSearch

+ ScriptLanguage ScriptLang

+ type ScriptLang uint

+ func ParseScriptLang(v string) (l ScriptLang, err error)

+ func (sl ScriptLang) String() string

+ func (sl ScriptLang) Valid() (err error)

v3.8.2

Sep 14, 2021

Changes in this version

+ const ScheduledTypeFlow

+ const ScheduledTypeScript

+ const ScheduledTypeSearch

+ type FlowParseRequest struct

+ Flow string

+ type FlowParseResponse struct

+ Error string

+ OK bool

+ OutputPayloads map[int]map[string]interface{}

type ScheduledSearch

+ Flow string

+ ScheduledType string

type ShardInfo

+ Cold bool

+ func (si ShardInfo) MarshalJSON() ([]byte, error)

type WellInfo

+ ColdPath string

+ Path string

v3.8.1

Aug 20, 2021

Changes in this version

type ResourceUpdate

+ func (ru *ResourceUpdate) Bytes() (b []byte)

+ func (ru *ResourceUpdate) Close()

+ func (ru *ResourceUpdate) SetStream(rc io.ReadCloser)

+ func (ru *ResourceUpdate) Stream() io.Reader

v3.8.0

Aug 13, 2021

Changes in this version

type BaseResponse

+ EntryCountValid bool

type ChartableDataPoint

+ func (cdp ChartableDataPoint) IsNaN() bool

type Element

+ Args string

+ Module string

type FilterRequest

+ Args string

+ Name string

type GUISettings

+ DisableFeaturePopups bool

type KitBuildRequest

+ Readme string

type KitMetadata

+ Readme string

type KitState

+ Readme string

+ func (ps *KitState) AddItem(itm KitItem) error

+ func (ps *KitState) GetItem(name, tp string) (KitItem, error)

+ func (ps *KitState) RemoveItem(name, tp string) error

type LicenseInfo

+ Hash []byte

type SearchAgentConfig

+ Searchagent_UUID string

v3.7.6

May 4, 2021

Changes in this version

type PackedUserTemplate

+ func (t *PackedUserTemplate) UnmarshalJSON(data []byte) error

v3.7.5

Apr 22, 2021

Changes in this version

type GUISettings

+ NonCommercial bool

type LicenseInfo

+ NFR bool

type SearchMacro

+ Global bool

v3.7.4

Apr 14, 2021

Changes in this version

+ const UnlimitedIngest

+ const UnlimitedIngestName

type IngestStats

+ LastDayCount uint64

+ LastDaySize uint64

+ type TemplateContents struct

+ Query string

+ Variables []TemplateVariable

+ type TemplateVariable struct

+ DefaultValue string

+ Description string

+ Label string

+ Name string

+ PreviewValue string

+ Required bool

v3.7.3

Mar 31, 2021

v3.7.2

Mar 31, 2021

Changes in this version

type BaseResponse

+ LimitDroppedRange TimeRange

+ OverLimit bool

v3.7.1

Mar 4, 2021

Changes in this version

type GenerateAXResponse

+ Confidence float64

+ type ImportInfo struct

+ BatchInfo string

+ BatchName string

+ Imported bool

+ Time time.Time

type SearchInfo

+ Import ImportInfo

+ Preview bool

type StartSearchRequest

+ Addendum json.RawMessage

+ Preview bool

type StartSearchResponse

+ Addendum json.RawMessage

v3.7.0

Feb 3, 2021

Changes in this version

+ const ABAC

+ const ABACName

+ const API_VERSION_MAJOR

+ const API_VERSION_MINOR

+ const AllowedMacroChars

+ const Cluster

+ const Community

+ const DownloadArchive

+ const DownloadCSV

+ const DownloadDataTypeEV

+ const DownloadDataTypeIP

+ const DownloadDataTypeSlice

+ const DownloadDataTypeString

+ const DownloadIPExists

+ const DownloadJSON

+ const DownloadLookupData

+ const DownloadPCAP

+ const DownloadText

+ const Enterprise

+ const Eval

+ const FDG_REQ_GET_ENTRIES

+ const FDG_REQ_STREAMING

+ const FDG_RESP_GET_ENTRIES

+ const FDG_RESP_STREAMING

+ const MetadataTypeNumber

+ const MetadataTypeRaw

+ const NoStats

+ const NoStatsName

+ const NotificationLevelCritical

+ const NotificationLevelError

+ const NotificationLevelInfo

+ const NotificationLevelWarn

+ const Overwatch

+ const OverwatchName

+ const REQ_CLOSE

+ const REQ_ENTRY_COUNT

+ const REQ_EXPLORE_TS_RANGE

+ const REQ_GET_ENTRIES

+ const REQ_GET_EXPLORE_ENTRIES

+ const REQ_SEARCH_DETAILS

+ const REQ_SEARCH_METADATA

+ const REQ_SEARCH_TAGS

+ const REQ_STATS_GET

+ const REQ_STATS_GET_LOCATION

+ const REQ_STATS_GET_OVERVIEW

+ const REQ_STATS_GET_RANGE

+ const REQ_STATS_GET_SUMMARY

+ const REQ_STATS_RANGE

+ const REQ_STATS_SIZE

+ const REQ_STREAMING

+ const REQ_TS_RANGE

+ const RESP_CLOSE

+ const RESP_ENTRY_COUNT

+ const RESP_ERROR

+ const RESP_EXPLORE_TS_RANGE

+ const RESP_GET_ENTRIES

+ const RESP_GET_EXPLORE_ENTRIES

+ const RESP_SEARCH_DETAILS

+ const RESP_SEARCH_METADATA

+ const RESP_SEARCH_TAGS

+ const RESP_STATS_GET

+ const RESP_STATS_GET_LOCATION

+ const RESP_STATS_GET_OVERVIEW

+ const RESP_STATS_GET_RANGE

+ const RESP_STATS_GET_SUMMARY

+ const RESP_STATS_RANGE

+ const RESP_STATS_SIZE

+ const RESP_STREAMING

+ const RESP_TS_RANGE

+ const RenderNameChart

+ const RenderNameFdg

+ const RenderNameGauge

+ const RenderNameHeatmap

+ const RenderNameHex

+ const RenderNameNumbercard

+ const RenderNameP2P

+ const RenderNamePcap

+ const RenderNamePointmap

+ const RenderNameRaw

+ const RenderNameStackGraph

+ const RenderNameTable

+ const RenderNameText

+ const Replication

+ const ReplicationName

+ const ResKey

+ const STATS_MASK

+ const STATS_MASK_ID

+ const ScriptVersionAnko

+ const Single

+ const SingleSignon

+ const SingleSignonName

+ const TagDefaultAllow

+ const TagDefaultDeny

+ const Unlimited

+ const UnlimitedCPU

+ const UnlimitedCPUName

+ var ChartableNaN = ChartableDataPoint(math.NaN())

+ var ErrIllegalMacroCharacter error = errors.New("Illegal macro name character")

+ var ErrIngestNotRestricted = errors.New("Ingest is not restricted")

+ var ErrInvalidGeofence = errors.New("Invalid geofence")

+ var ErrMissingModule error = errors.New("extraction module name is missing")

+ var ErrMissingParams error = errors.New("extraction parameters missing")

+ var ErrMissingTag error = errors.New("extraction tag assignment missing")

+ var ErrNameChartableMismatch = errors.New("Name lengths do not match chartable lengths")

+ var ErrNoMetadata = errors.New("No metadata available")

+ var NeverExpires = time.Date(2099, 12, 31, 12, 0, 0, 0, time.UTC)

+ var OverrideNames []string = []string

+ var Overrides []FeatureOverride = []FeatureOverride

+ func CheckApiVersion(remote ApiInfo) error

+ func CheckMacroName(name string) error

+ func CheckTagAccess(tg string, prime TagAccess, set []TagAccess) (allowed bool)

+ func CheckTagConflict(a, b TagAccess) (conflict bool, tag string)

+ func EncodeMetadata(md map[string]interface{}) ([]byte, error)

+ func FeatureOverridesString(fo FeatureOverride) (s string)

+ func FilterTags(tags []string, prime TagAccess, set []TagAccess) (r []string)

+ func GenLine(wtr io.Writer, name, line string) (err error)

+ func UniqueIngesters(sts []IngestStats) (r uint64)

+ type AXDefinition struct

+ Args string

+ Desc string

+ GIDs []int32

+ Global bool

+ Labels []string

+ LastUpdated time.Time

+ Module string

+ Name string

+ Params string

+ Synced bool

+ Tag string

+ UID int32

+ UUID uuid.UUID

+ func (axd AXDefinition) Equal(v AXDefinition) bool

+ func (dc *AXDefinition) Validate() error

+ func (dc AXDefinition) Encode(fout io.Writer, hdr string) (err error)

+ func (dc AXDefinition) JSONMetadata() (ro json.RawMessage, err error)

+ type AddGroup struct

+ Desc string

+ Name string

+ type AddUser struct

+ Admin bool

+ Email string

+ Name string

+ Pass string

+ User string

+ type AdminActionResp struct

+ Admin bool

+ UID int32

+ type ApiInfo struct

+ Major uint32

+ Minor uint32

+ func ApiVersion() ApiInfo

+ type AttachSearchRequest struct

+ ID string

+ type AttachSearchResponse struct

+ Error string

+ Info *SearchInfo

+ RendererCmd string

+ RendererMod string

+ Subproto string

+ type AuthorInfo struct

+ Company string

+ Email string

+ Name string

+ URL string

+ type BackendNotification struct

+ Action NotificationAction

+ GUID uuid.UUID

+ type BaseRequest struct

+ Addendum json.RawMessage

+ EntryRange *EntryRange

+ ID uint32

+ Stats *SearchStatsRequest

+ type BaseResponse struct

+ Addendum json.RawMessage

+ AdditionalEntries bool

+ EntryCount uint64

+ EntryRange *EntryRange

+ Error string

+ Finished bool

+ ID uint32

+ Metadata *SearchMetadata

+ SearchInfo *SearchInfo

+ Stats *SearchStatsResponse

+ Tags map[string]entry.EntryTag

+ type BuildInfo struct

+ BuildDate time.Time

+ BuildID string

+ GUIBuildID string

+ func (bi BuildInfo) NewerVersion(nbi BuildInfo) bool

+ func (bi BuildInfo) String() string

+ func (bi BuildInfo) Version() string

+ type CanonicalVersion struct

+ Major uint32

+ Minor uint32

+ Point uint32

+ func ParseCanonicalVersion(s string) (r CanonicalVersion, err error)

+ func (cv CanonicalVersion) Compare(ncv CanonicalVersion) int

+ func (cv CanonicalVersion) Compatible(min, max CanonicalVersion) bool

+ func (cv CanonicalVersion) Enabled() bool

+ func (cv CanonicalVersion) NewerVersion(ncv CanonicalVersion) bool

+ func (cv CanonicalVersion) String() string

+ type CapError struct

+ Cap Capability

+ Error error

+ type Capability uint16

+ const AttachSearch

+ const BackgroundSearch

+ const DashboardRead

+ const DashboardWrite

+ const Download

+ const ExtractorRead

+ const ExtractorWrite

+ const GetTags

+ const Ingest

+ const KitBuild

+ const KitDownload

+ const KitRead

+ const KitWrite

+ const LibraryRead

+ const LibraryWrite

+ const LicenseRead

+ const ListGroupMembers

+ const ListGroups

+ const ListUsers

+ const MacroRead

+ const MacroWrite

+ const NotificationRead

+ const NotificationWrite

+ const PivotRead

+ const PivotWrite

+ const PlaybookRead

+ const PlaybookWrite

+ const ResourceRead

+ const ResourceWrite

+ const SOAREmail

+ const SOARLibs

+ const SaveSearch

+ const ScheduleRead

+ const ScheduleWrite

+ const Search

+ const SearchAllHistory

+ const SearchGroupHistory

+ const SearchHistory

+ const SetSearchGroup

+ const Stats

+ const SystemInfoRead

+ const TemplateRead

+ const TemplateWrite

+ const UserFileRead

+ const UserFileWrite

+ func (c Capability) CapabilityDesc() CapabilityDesc

+ func (c Capability) Description() string

+ func (c Capability) String() string

+ type CapabilityDesc struct

+ Cap Capability

+ Desc string

+ Name string

+ type CapabilityTemplate struct

+ Caps []Capability

+ Desc string

+ Name string

+ type ChangePassword struct

+ NewPass string

+ OrigPass string

+ type ChartRequest struct

+ type ChartResponse struct

+ Entries ChartableValueSet

+ type Chartable struct

+ Data []ChartableDataPoint

+ TS entry.Timestamp

+ type ChartableDataPoint float64

+ func (cdp ChartableDataPoint) MarshalJSON() ([]byte, error)

+ type ChartableSet []Chartable

+ func (cs *ChartableSet) Add(c Chartable)

+ func (cs *ChartableSet) Reset()

+ func (cs ChartableSet) Len() int

+ func (cs ChartableSet) Sec(i int) int64

+ func (cs ChartableSet) TS(i int) entry.Timestamp

+ type ChartableValueSet struct

+ Categories []string

+ KeyComps []KeyComponents

+ Names []string

+ Values ChartableSet

+ func (cvs *ChartableValueSet) AddKeyComponents(name, cat string, keys []string) error

+ func (cvs *ChartableValueSet) SortByNames() error

+ func (cvs ChartableValueSet) MarshalJSON() ([]byte, error)

+ type Dashboard struct

+ Created time.Time

+ Data RawObject

+ Description string

+ GIDs []int32

+ GUID string

+ Global bool

+ ID uint64

+ Labels []string

+ Name string

+ Synced bool

+ Trivial bool

+ UID int32

+ Updated time.Time

+ func (d *Dashboard) UnmarshalObject(obj interface{}) error

+ func (d Dashboard) Equal(v Dashboard) bool

+ type DashboardAdd struct

+ Data RawObject

+ Description string

+ GIDs []int32

+ Global bool

+ Labels []string

+ Name string

+ UID int32

+ func EncodeDashboardAdd(name, desc string, obj interface{}) (*DashboardAdd, error)

+ func (d *DashboardAdd) UnmarshalObject(obj interface{}) error

+ func (d DashboardAdd) MarshalJSON() ([]byte, error)

+ type DashboardComment struct

+ Comment string

+ ID int

+ Name string

+ UID int

+ type DashboardGet struct

+ Created time.Time

+ Customer string

+ Desc string

+ GUID string

+ JSON []byte

+ Name string

+ Score int

+ Tags []string

+ Updated time.Time

+ User string

+ Version int

+ type DashboardPost struct

+ Desc string

+ JSON []byte

+ Name string

+ Tags []string

+ User string

+ type Dashboards []Dashboard

+ func (d Dashboards) MarshalJSON() ([]byte, error)

+ type DefaultTagRule bool

+ func (dtr DefaultTagRule) String() string

+ type DeploymentInfo struct

+ DefaultLanguage string

+ Distributed bool

+ type DiskIO struct

+ Device string

+ Read uint64

+ Write uint64

+ type DiskStats struct

+ Mount string

+ Partition string

+ Total uint64

+ Used uint64

+ type Edge struct

+ Dst int

+ Src int

+ Value int64

+ type Element struct

+ Filters []string

+ Name string

+ Path string

+ SubElements []Element

+ Value interface{}

+ type EntryRange struct

+ EndTS entry.Timestamp

+ First uint64

+ Last uint64

+ StartTS entry.Timestamp

+ type EnumeratedPair struct

+ Name string

+ RawValue RawEnumeratedValue

+ Value string

+ type ExploreResult struct

+ Elements []Element

+ Module string

+ Tag string

+ type FdgRequest struct

+ type FdgResponse struct

+ Entries FdgSet

+ type FdgSet struct

+ Edges []Edge

+ Groups []string

+ Nodes []Node

+ type FeatureOverride uint64

+ func NewFeatureOverride(name string) (fo FeatureOverride, err error)

+ func ParseFeatureOverrides(v string) (fo FeatureOverride, err error)

+ func (fo *FeatureOverride) Update(t FeatureOverride)

+ func (fo FeatureOverride) Set(t FeatureOverride) bool

+ func (fo FeatureOverride) String() (r string)

+ type FilterRequest struct

+ Module string

+ Op string

+ Path string

+ Tag string

+ Value string

+ type GUISettings struct

+ DisableMapTileProxy bool

+ DistributedWebservers bool

+ IngestAllowed bool

+ MapTileUrl string

+ MaxFileSize uint64

+ MaxResourceSize uint64

+ ServerTime time.Time

+ ServerTimezone string

+ ServerTimezoneOffset int

+ type GaugeRequest struct

+ type GaugeResponse struct

+ Entries []GaugeValue

+ type GaugeValue struct

+ Magnitude float64

+ Max float64

+ Min float64

+ Name string

+ type GenerateAXRequest struct

+ Entries []SearchEntry

+ Tag string

+ type GenerateAXResponse struct

+ Entries []SearchEntry

+ Explore []ExploreResult

+ Extractor AXDefinition

+ type Geofence struct

+ NorthEast Location

+ SouthWest Location

+ func (gf *Geofence) CrossesAntimeridian() bool

+ func (gf *Geofence) InFence(loc Location) bool

+ func (gf *Geofence) Validate() error

+ type GroupDetails struct

+ Capabilities []byte

+ Desc string

+ GID int32

+ Name string

+ Synced bool

+ Tags TagAccess

+ type HeatmapRequest struct

+ Fence Geofence

+ type HeatmapResponse struct

+ Entries []HeatmapValue

+ type HeatmapValue struct

+ Magnitude float64

+ func (hv *HeatmapValue) UnmarshalJSON(data []byte) error

+ func (hv HeatmapValue) MarshalJSON() ([]byte, error)

+ type HostSysStats struct

+ BuildInfo BuildInfo

+ CPUCount int

+ CPUUsage float64

+ Disks []DiskStats

+ HostHash string

+ IO []DiskIO

+ MemoryUsedPercent float64

+ Net NetworkUsage

+ ProcessHeapAllocation uint64

+ ProcessSysReserved uint64

+ TotalMemory uint64

+ Uptime uint64

+ VirtRole string

+ VirtSystem string

+ type IdKitState struct

+ GID int32

+ UID int32

+ UUID uuid.UUID

+ type IdxStatResponse struct

+ Error string

+ Stats map[string]IdxStats

+ type IdxStats struct

+ Error string

+ IndexStats []IndexManagerStats

+ UUID uuid.UUID

+ func (m *IdxStats) MarshalJSON() ([]byte, error)

+ type IndexManagerStats struct

+ Name string

+ Stats []IndexerStats

+ func (m *IndexManagerStats) MarshalJSON() ([]byte, error)

+ type IndexerPingResponse struct

+ Error string

+ States map[string]string

+ type IndexerRequest struct

+ DialString string

+ Forwarded bool

+ type IndexerStats struct

+ Accelerator string

+ Cold bool

+ Data uint64

+ Entries uint64

+ Extractor string

+ Path string

+ type IndexerWellData struct

+ Replicated map[uuid.UUID][]WellInfo

+ UUID uuid.UUID

+ Wells []WellInfo

+ func (iwd *IndexerWellData) Sort()

+ func (v IndexerWellData) MarshalJSON() ([]byte, error)

+ type IngestResponse struct

+ Count int64

+ Size int64

+ Tags []string

+ type IngestStats struct

+ Ingesters []IngesterStats

+ QuotaMax uint64

+ QuotaUsed uint64

+ TotalCount uint64

+ TotalSize uint64

+ func (is IngestStats) MarshalJSON() ([]byte, error)

+ type IngesterStats struct

+ Count uint64

+ Name string

+ RemoteAddress string

+ Size uint64

+ State ingest.IngesterState

+ Tags []string

+ UUID string

+ Uptime time.Duration

+ Version string

+ func (is IngesterStats) Hash() uint64

+ func (is IngesterStats) MarshalJSON() ([]byte, error)

+ type IngesterStatsResponse struct

+ Error string

+ Stats map[string]IngestStats

+ type InstallStatus struct

+ CurrentStep string

+ Done bool

+ Error string

+ InstallID int32

+ Log string

+ Owner int32

+ Percentage float64

+ Updated time.Time

+ func NewInstallStatus(itemcount int, installID int32, uid int32) *InstallStatus

+ func (i *InstallStatus) ItemDone()

+ func (i *InstallStatus) SetDone()

+ func (i *InstallStatus) SetError(err error)

+ func (i *InstallStatus) UpdateCurrentStep(step string)

+ type KeyComponents struct

+ Keys []string

+ type KitBuildRequest struct

+ Banner string

+ ConfigMacros []KitConfigMacro

+ Cover string

+ Dashboards []uint64

+ Dependencies []KitDependency

+ Description string

+ EmbeddedItems []KitEmbeddedItem

+ Extractors []uuid.UUID

+ Files []uuid.UUID

+ ID string

+ Icon string

+ Macros []uint64

+ MaxVersion CanonicalVersion

+ MinVersion CanonicalVersion

+ Name string

+ Pivots []uuid.UUID

+ Playbooks []uuid.UUID

+ Resources []string

+ ScheduledSearches []int32

+ ScriptDeployRules map[int32]ScriptDeployConfig

+ SearchLibraries []uuid.UUID

+ Templates []uuid.UUID

+ Version uint

+ func (pbr *KitBuildRequest) Validate() error

+ type KitBuildResponse struct

+ Size int64

+ UID int32

+ UUID string

+ type KitConfig struct

+ AllowExternalResource bool

+ AllowUnsigned bool

+ ConfigMacros []KitConfigMacro

+ Global bool

+ InstallationGroup int32

+ KitLabels []string

+ Labels []string

+ OverwriteExisting bool

+ ScriptDeployRules map[string]ScriptDeployConfig

+ type KitConfigMacro struct

+ DefaultValue string

+ Description string

+ InstalledByID string

+ MacroName string

+ Type string

+ Value string

+ type KitDependency struct

+ ID string

+ MinVersion uint

+ type KitEmbeddedItem struct

+ Content []byte

+ type KitItem struct

+ AdditionalInfo json.RawMessage

+ Hash [sha256.Size]byte

+ ID string

+ Name string

+ Type string

+ func (ki *KitItem) DescriptionString() (s string)

+ func (ki KitItem) String() (r string)

+ type KitManifest struct

+ Data []byte

+ GID int32

+ Global bool

+ Synced bool

+ UID int32

+ UUID uuid.UUID

+ WebserverID uuid.UUID

+ func (pm *KitManifest) Decode(v interface{}) (err error)

+ func (pm *KitManifest) Encode(v interface{}) (err error)

+ type KitMetadata struct

+ AdminRequired bool

+ Assets []KitMetadataAsset

+ ConfigMacros []KitConfigMacro

+ Created time.Time

+ Dependencies []KitDependency

+ Description string

+ GUID string

+ ID string

+ Ingesters []string

+ Items []KitItem

+ MaxVersion CanonicalVersion

+ MinVersion CanonicalVersion

+ Name string

+ Signed bool

+ Size int64

+ Tags []string

+ UUID string

+ Version uint

+ type KitMetadataAsset struct

+ Banner bool

+ Featured bool

+ Legend string

+ Source string

+ Type string

+ func (kma KitMetadataAsset) String() (s string)

+ type KitState struct

+ AdminRequired bool

+ Banner string

+ ConfigMacros []KitConfigMacro

+ ConflictingItems []KitItem

+ Cover string

+ Description string

+ ID string

+ Icon string

+ InstallationTime time.Time

+ Installed bool

+ Items []KitItem

+ Labels []string

+ MaxVersion CanonicalVersion

+ Metadata json.RawMessage

+ MinVersion CanonicalVersion

+ ModifiedItems []SourcedKitItem

+ Name string

+ RequiredDependencies []KitMetadata

+ Signed bool

+ UID int32

+ UUID string

+ Version uint

+ func (ps *KitState) UpdateItem(name, tp, id string) error

+ type LicenseDistributionStatus struct

+ States []LicenseIndexerStatus

+ Status string

+ type LicenseIndexerInfo struct

+ Error error

+ Indexer string

+ Info LicenseInfo

+ type LicenseIndexerStatus struct

+ Error string

+ Indexer string

+ Serviced bool

+ type LicenseInfo struct

+ CustomerNumber uint64

+ CustomerUUID string

+ Expiration entry.Timestamp

+ MaxNodes uint32

+ Metadata []byte

+ Overrides FeatureOverride

+ Type LicenseType

+ Version uint64

+ func (li LicenseInfo) Get(key string) (val interface{}, err error)

+ func (li LicenseInfo) MaxUsers() int

+ func (li LicenseInfo) ReplicationEnabled() bool

+ func (li LicenseInfo) SKU() string

+ func (li LicenseInfo) SSOEnabled() bool

+ func (li LicenseInfo) Serial() string

+ func (li LicenseInfo) Validate() error

+ func (lt LicenseInfo) IngestMetadata() (rate uint64, err error)

+ type LicenseType uint64

+ func ParseType(c string) (LicenseType, error)

+ func (lt *LicenseType) UnmarshalJSON(v []byte) error

+ func (lt LicenseType) Abbr() string

+ func (lt LicenseType) AllFeatures() (r bool)

+ func (lt LicenseType) CanUpgrade(dest LicenseType) bool

+ func (lt LicenseType) MarshalJSON() ([]byte, error)

+ func (lt LicenseType) SingleNode() (r bool)

+ func (lt LicenseType) String() string

+ func (lt LicenseType) Valid() bool

+ type LicenseUpdateError struct

+ Err string

+ Name string

+ type Location struct

+ Lat float64

+ Long float64

+ func (loc *Location) Decode(v []byte) bool

+ func (loc Location) Encode() (v []byte)

+ func (loc Location) String() string

+ func (loc Location) Valid() bool

+ type LogLevel struct

+ Level string

+ type LoggingLevels struct

+ Current string

+ Levels []string

+ func (m *LoggingLevels) MarshalJSON() ([]byte, error)

+ type LoginRequest struct

+ Pass string

+ User string

+ type LoginResponse struct

+ Admin bool

+ JWT string

+ LoginStatus bool

+ Reason string

+ type ModuleHint struct

+ Condensing bool

+ ConsumedEVs []string

+ Name string

+ ProducedEVs []string

+ ResourcesNeeded []string

+ type ModuleStatsUpdate struct

+ Duration time.Duration

+ InputBytes uint64

+ InputCount uint64

+ OutputBytes uint64

+ OutputCount uint64

+ func (m *ModuleStatsUpdate) Size() (sz int64)

+ func (sms *ModuleStatsUpdate) AddIn(count, bts uint64)

+ func (sms *ModuleStatsUpdate) AddOut(count, bts uint64)

+ func (sms ModuleStatsUpdate) Equal(t ModuleStatsUpdate) bool

+ type NetworkUsage struct

+ Down uint64

+ Up uint64

+ type Node struct

+ Group int

+ Name string

+ type Notification struct

+ Broadcast bool

+ Expires time.Time

+ GID int32

+ IgnoreUntil time.Time

+ Level string

+ Link string

+ Msg string

+ Origin uuid.UUID

+ Sender int32

+ Sent time.Time

+ Type uint32

+ UID int32

+ func (n *Notification) Expired() bool

+ type NotificationAction uint32

+ var ClearBackendNotification NotificationAction = 1

+ var SetBackendNotification NotificationAction = 0

+ type NotificationSet map[uint64]Notification

+ type OverviewStatSet struct

+ Bytes uint64

+ Count uint64

+ TS entry.Timestamp

+ type P2PRequest struct

+ Fence Geofence

+ type P2PResponse struct

+ Entries []P2PValue

+ ValueNames []string

+ type P2PValue struct

+ Dst Location

+ Magnitude float64

+ Src Location

+ Values []string

+ type PackedPivot struct

+ Data RawObject

+ Description string

+ Labels []string

+ Name string

+ UUID string

+ func (put *PackedPivot) JSONMetadata() (json.RawMessage, error)

+ type PackedUserTemplate struct

+ Data RawObject

+ Description string

+ Labels []string

+ Name string

+ UUID string

+ func (put *PackedUserTemplate) JSONMetadata() (json.RawMessage, error)

+ type ParseSearchRequest struct

+ Filters []FilterRequest

+ SearchString string

+ Sequence uint64

+ type ParseSearchResponse struct

+ GoodQuery bool

+ ModuleIndex int

+ ParseError string

+ ParsedQuery string

+ RawQuery string

+ Sequence uint64

+ type PingReq struct

+ X error

+ type Pivot struct

+ Contents RawObject

+ Description string

+ Disabled bool

+ GUID uuid.UUID

+ Labels []string

+ Name string

+ func (pivot Pivot) WirePivot(thing Thing) WirePivot

+ func (t Pivot) Pack() (put PackedPivot)

+ type Playbook struct

+ Author AuthorInfo

+ Body []byte

+ Desc string

+ GIDs []int32

+ GUID uuid.UUID

+ Global bool

+ Labels []string

+ LastUpdated time.Time

+ Metadata []byte

+ Name string

+ Synced bool

+ UID int32

+ UUID uuid.UUID

+ func (pb Playbook) JSONMetadata() (json.RawMessage, error)

+ type PointmapKV struct

+ Key string

+ Value string

+ func (pkv PointmapKV) IsEmpty() bool

+ func (pkv PointmapKV) MarshalJSON() (r []byte, err error)

+ type PointmapRequest struct

+ Fence Geofence

+ type PointmapResponse struct

+ Entries []PointmapValue

+ type PointmapValue struct

+ Loc Location

+ Metadata []PointmapKV

+ type RawEnumeratedValue struct

+ Data []byte

+ Type uint16

+ type RawObject json.RawMessage

+ func (o *RawObject) UnmarshalJSON(buff []byte) error

+ func (o RawObject) MarshalJSON() ([]byte, error)

+ func (o RawObject) String() string

+ type RawRequest struct

+ type RawResponse struct

+ Entries []SearchEntry

+ Explore []ExploreResult

+ func (rr RawResponse) MarshalJSON() ([]byte, error)

+ type RenderModuleInfo struct

+ Description string

+ Examples []string

+ Name string

+ SortRequired bool

+ func (m *RenderModuleInfo) MarshalJSON() ([]byte, error)

+ type ReplicationState struct

+ Entries uint64

+ Size uint64

+ UUID uuid.UUID

+ type ResourceContentType struct

+ Body []byte

+ ContentType string

+ type ResourceList struct

+ Domain int16

+ List []ResourceMetadata

+ type ResourceMetadata struct

+ Description string

+ Domain int16

+ GUID string

+ Global bool

+ GroupACL []int32

+ Hash []byte

+ Labels []string

+ LastModified time.Time

+ ResourceName string

+ Size uint64

+ Synced bool

+ UID int32

+ VersionNumber int

+ func (m ResourceMetadata) String() string

+ func (m1 ResourceMetadata) Equal(m2 ResourceMetadata) bool

+ type ResourceUpdate struct

+ Data []byte

+ Metadata ResourceMetadata

+ type RespError struct

+ Error string

+ type ScheduledSearch struct

+ DebugMode bool

+ DebugOutput []byte

+ Description string

+ Disabled bool

+ Duration int64

+ GUID uuid.UUID

+ Global bool

+ Groups []int32

+ ID int32

+ Labels []string

+ LastError string

+ LastRun time.Time

+ LastRunDuration time.Duration

+ LastSearchIDs []string

+ Name string

+ OneShot bool

+ Owner int32

+ PersistentMaps map[string]map[string]interface{}

+ Schedule string

+ Script string

+ SearchSinceLastRun bool

+ SearchString string

+ Synced bool

+ Timezone string

+ Updated time.Time

+ func (s ScheduledSearch) Equal(v ScheduledSearch) bool

+ func (ss *ScheduledSearch) Dedup()

+ func (ss *ScheduledSearch) TypeName() string

+ type ScheduledSearchParseRequest struct

+ Script string

+ Version int

+ type ScheduledSearchParseResponse struct

+ Error string

+ ErrorColumn int

+ ErrorLine int

+ OK bool

+ type ScriptDeployConfig struct

+ Disabled bool

+ RunImmediately bool

+ type SearchAgentConfig struct

+ Disable_Network_Script_Functions bool

+ HTTP_Proxy string

+ Insecure_Skip_TLS_Verify bool

+ Insecure_Use_HTTP bool

+ Log_File string

+ Log_Level string

+ Max_Script_Run_Time int64

+ Scratch_Path string

+ Search_Agent_Auth string

+ Webserver_Address []string

+ type SearchCtrlStatus struct

+ AttachedClients int

+ GID int32

+ ID string

+ State string

+ StoredData int64

+ UID int32

+ type SearchEntry struct

+ Data []byte

+ Enumerated []EnumeratedPair

+ SRC net.IP

+ TS entry.Timestamp

+ Tag entry.EntryTag

+ func (se SearchEntry) Equal(v SearchEntry) bool

+ func (se SearchEntry) GetEnumerated(name string) (val string, ok bool)

+ type SearchHints struct

+ CollapsingIndex int

+ ModuleHints []ModuleHint

+ RenderModule string

+ Tags []string

+ TimeZoomDisabled bool

+ type SearchInfo struct

+ CollapsingIndex int

+ Descending bool

+ Duration time.Duration

+ EffectiveQuery string

+ EndRange time.Time

+ GID int32

+ ID string

+ IndexSize int64

+ ItemCount int64

+ LastUpdate time.Time

+ Metadata json.RawMessage

+ MinZoomWindow uint

+ Name string

+ NoHistory bool

+ RenderDownloadFormats []string

+ StartRange time.Time

+ Started time.Time

+ StoreSize int64

+ Tags []string

+ TimeZoomDisabled bool

+ UID int32

+ UserQuery string

+ func (si *SearchInfo) UnmarshalJSON(data []byte) error

+ func (si SearchInfo) MarshalJSON() ([]byte, error)

+ func (si SearchInfo) StorageSize() int64

+ type SearchLibrary struct

+ Description string

+ GUID uuid.UUID

+ Labels []string

+ Metadata RawObject

+ Name string

+ Query string

+ func (psl SearchLibrary) Equal(other SearchLibrary) (ok bool)

+ func (sl SearchLibrary) JSONMetadata() (json.RawMessage, error)

+ type SearchLog struct

+ EffectiveQuery string

+ GID int32

+ Launched time.Time

+ Synced bool

+ UID int32

+ UserQuery string

+ func (sl SearchLog) Equal(v SearchLog) bool

+ type SearchMacro struct

+ Description string

+ Expansion string

+ GIDs []int32

+ ID uint64

+ Labels []string

+ LastUpdated time.Time

+ Name string

+ Synced bool

+ UID int32

+ type SearchMetadata struct

+ SourceStats []SourceMetadataEntry

+ TagStats map[string]uint

+ ValueStats []SearchMetadataEntry

+ type SearchMetadataEntry struct

+ Name string

+ Number SearchMetadataNumber

+ Raw SearchMetadataRaw

+ Type string

+ type SearchMetadataNumber struct

+ Count uint

+ Max float64

+ Min float64

+ type SearchMetadataRaw struct

+ Map map[string]uint

+ Other uint

+ type SearchModuleInfo struct

+ Collapsing bool

+ Examples []string

+ FrontendOnly bool

+ Info string

+ Name string

+ Sorting bool

+ type SearchModuleStats struct

+ Args string

+ Name string

+ func (s *SearchModuleStats) ResetCounters()

+ func (s *SearchModuleStats) Size() int64

+ func (sms SearchModuleStats) Equal(t SearchModuleStats) bool

+ func (sms SearchModuleStats) JSON() ([]byte, error)

+ type SearchModuleStatsUpdate struct

+ Stats []SearchModuleStats

+ TS entry.Timestamp

+ func (m *SearchModuleStatsUpdate) MarshalJSON() ([]byte, error)

+ func (s *SearchModuleStatsUpdate) Add(smsu *SearchModuleStatsUpdate) error

+ func (s *SearchModuleStatsUpdate) AddUpdate(mu []ModuleStatsUpdate) error

+ func (s *SearchModuleStatsUpdate) Append(sms SearchModuleStats)

+ func (s *SearchModuleStatsUpdate) CopyZero() SearchModuleStatsUpdate

+ func (s *SearchModuleStatsUpdate) IsNull() bool

+ func (s *SearchModuleStatsUpdate) ResetCounters()

+ func (s *SearchModuleStatsUpdate) Size() (sz int64)

+ func (s SearchModuleStatsUpdate) Copy() SearchModuleStatsUpdate

+ type SearchStatsRequest struct

+ Addendum json.RawMessage

+ SetCount int64

+ SetEnd entry.Timestamp

+ SetStart entry.Timestamp

+ func (ssr SearchStatsRequest) MarshalJSON() ([]byte, error)

+ type SearchStatsResponse struct

+ Addendum json.RawMessage

+ Current entry.Timestamp

+ OverviewSet []OverviewStatSet

+ RangeEnd entry.Timestamp

+ RangeStart entry.Timestamp

+ Set []StatSet

+ Size int

+ func (ssr SearchStatsResponse) MarshalJSON() ([]byte, error)

+ type Session struct

+ ID uint64

+ JWT string

+ LastHit time.Time

+ Origin net.IP

+ Synced bool

+ TempSession bool

+ UDets *UserDetails

+ UID int32

+ func DecodeSession(b []byte) (*Session, error)

+ func (s *Session) Encode() ([]byte, error)

+ type ShardInfo struct

+ End time.Time

+ Entries uint64

+ Name string

+ RemoteState ReplicationState

+ Size uint64

+ Start time.Time

+ type SortableSearchLog []SearchLog

+ func (s SortableSearchLog) Len() int

+ func (s SortableSearchLog) Less(i, j int) bool

+ func (s SortableSearchLog) Swap(i, j int)

+ type SourceMetadataEntry struct

+ Count uint

+ IP string

+ type SourcedKitItem struct

+ KitID string

+ KitName string

+ KitVersion uint

+ type StackGraphRequest struct

+ type StackGraphResponse struct

+ Entries []StackGraphSet

+ type StackGraphSet struct

+ Key string

+ Values []StackGraphValue

+ func (sgs *StackGraphSet) Magnitude() (v int64)

+ type StackGraphValue struct

+ Label string

+ Value int64

+ type StartSearchAck struct

+ Ok bool

+ OutputSearchSubproto string

+ OutputStatsSubproto string

+ type StartSearchRequest struct

+ Background bool

+ Filters []FilterRequest

+ Metadata json.RawMessage

+ Name string

+ NoHistory bool

+ SearchEnd string

+ SearchStart string

+ SearchString string

+ type StartSearchResponse struct

+ Background bool

+ CollapsingIndex int

+ Error string

+ Metadata json.RawMessage

+ OutputSearchSubproto string

+ RawQuery string

+ RenderCmd string

+ RenderModule string

+ SearchEndRange time.Time

+ SearchID string

+ SearchStartRange time.Time

+ SearchString string

+ type StatSet struct

+ Stats []SearchModuleStats

+ TS entry.Timestamp

+ func (m *StatSet) MarshalJSON() ([]byte, error)

+ func (ss *StatSet) Add(s *StatSet)

+ func (ss *StatSet) AddParts(ts entry.Timestamp, stats []SearchModuleStats)

+ func (ss *StatSet) AddStats(stats []SearchModuleStats)

+ func (ss *StatSet) Populated() bool

+ type StatsRequest struct

+ type StatsResponse struct

+ type StatsUpdate struct

+ ClientID string

+ Stats *SearchModuleStatsUpdate

+ type StoredBuildRequest struct

+ UID int32

+ type StringTagEntry struct

+ Data []byte

+ Enumerated []EnumeratedPair

+ SRC net.IP

+ TS time.Time

+ Tag string

+ func (se StringTagEntry) Equal(v StringTagEntry) bool

+ func (se StringTagEntry) GetEnumerated(name string) (val string, ok bool)

+ type SysDescResp struct

+ Descriptions map[string]SysInfo

+ Error string

+ type SysInfo struct

+ CPUCache string

+ CPUCount int

+ CPUMhz string

+ CPUModel string

+ Error string

+ SystemVersion string

+ TotalMemoryMB uint64

+ VirtRole string

+ VirtSystem string

+ func (si SysInfo) Empty() bool

+ func (si SysInfo) MarshalJSON() ([]byte, error)

+ type SysStatResponse struct

+ Error string

+ Stats map[string]SysStats

+ type SysStats struct

+ Error string

+ Stats *HostSysStats

+ type TableRequest struct

+ type TableResponse struct

+ Entries TableValueSet

+ type TableRow struct

+ Row []string

+ TS entry.Timestamp

+ func (r TableRow) MarshalJSON() ([]byte, error)

+ type TableRowSet []TableRow

+ type TableValueSet struct

+ Columns []string

+ Rows TableRowSet

+ func (t *TableValueSet) Compare(u *TableValueSet) (cols bool, rows bool, idx int)

+ func (t TableValueSet) MarshalJSON() ([]byte, error)

+ type TagAccess struct

+ Default DefaultTagRule

+ Tags []string

+ func (ta *TagAccess) Validate() (err error)

+ func (ta TagAccess) Check(tg string) (explicit bool, grant bool)

+ type TextRequest struct

+ type TextResponse struct

+ Entries []SearchEntry

+ Explore []ExploreResult

+ func (tr TextResponse) MarshalJSON() ([]byte, error)

+ type Thing struct

+ Contents []byte

+ GIDs []int32

+ Global bool

+ Synced bool

+ UID int32

+ UUID uuid.UUID

+ Updated time.Time

+ func (t *Thing) Decode(v []byte) error

+ func (t *Thing) DecodeContents(obj interface{}) error

+ func (t *Thing) Encode() ([]byte, error)

+ func (t *Thing) EncodeContents(obj interface{}) error

+ func (t *Thing) Header() ThingHeader

+ type ThingHeader struct

+ GIDs []int32

+ Global bool

+ ThingUUID uuid.UUID

+ UID int32

+ type TimeRange struct

+ EndTS entry.Timestamp

+ StartTS entry.Timestamp

+ func (tr *TimeRange) DecodeJSON(r io.Reader) error

+ func (tr *TimeRange) RoundToSecond()

+ func (tr *TimeRange) Swap()

+ func (tr *TimeRange) UnmarshalJSON(d []byte) error

+ func (tr TimeRange) IsEmpty() bool

+ type TokenSigningKey struct

+ Expiration time.Time

+ Key []byte

+ type UpdateUser struct

+ Admin bool

+ Email string

+ Locked bool

+ Name string

+ User string

+ type UserAddGroups struct

+ GIDs []int32

+ func (uag *UserAddGroups) MarshalJSON() ([]byte, error)

+ type UserBackup struct

+ Groups []GroupDetails

+ Users []UserDetails

+ func (ub *UserBackup) ClearSynced()

+ type UserDefaultSearchGroup struct

+ GID int32

+ type UserDetails struct

+ Admin bool

+ Capabilities []byte

+ DefaultGID int32

+ Email string

+ Groups []GroupDetails

+ Hash []byte

+ Locked bool

+ Name string

+ Synced bool

+ TS time.Time

+ Tags TagAccess

+ UID int32

+ User string

+ func (u UserDetails) MarshalJSON() ([]byte, error)

+ func (ud *UserDetails) CanModify(uid int32) bool

+ func (ud *UserDetails) CanRead(uid int32, gids []int32) bool

+ func (ud *UserDetails) GIDs() []int32

+ func (ud *UserDetails) GroupNames() (gps []string)

+ func (ud *UserDetails) GroupTagAccess() (r []TagAccess)

+ func (ud *UserDetails) InAllGroups(gids []int32) bool

+ func (ud *UserDetails) InGroup(gid int32) bool

+ func (ud *UserDetails) UserCanRead(uid int32, gids []int32) bool

+ type UserFile struct

+ Contents []byte

+ Desc string

+ GUID uuid.UUID

+ Labels []string

+ Name string

+ func (uf *UserFile) Info() (sz int64, tp string)

+ func (uf *UserFile) JSONMetadata() (json.RawMessage, error)

+ type UserFileDetails struct

+ Desc string

+ GIDs []int32

+ GUID uuid.UUID

+ Global bool

+ Labels []string

+ Name string

+ Size int64

+ ThingUUID uuid.UUID

+ Type string

+ UID int32

+ Updated time.Time

+ func (ufd *UserFileDetails) String() string

+ type UserMail struct

+ Attachments []UserMailAttachment

+ Bcc []string

+ Body string

+ Cc []string

+ From string

+ Subject string

+ To []string

+ func (um UserMail) Validate() error

+ type UserMailAttachment struct

+ Content []byte

+ Name string

+ func (uma UserMailAttachment) Validate() error

+ type UserMailConfig struct

+ InsecureSkipVerify bool

+ Password string

+ Port int

+ Server string

+ UseTLS bool

+ Username string

+ type UserPreference struct

+ Data []byte

+ Name string

+ Synced bool

+ UID int32

+ Updated time.Time

+ type UserPreferences []UserPreference

+ func (ups UserPreferences) MarshalJSON() ([]byte, error)

+ type UserSessions struct

+ Sessions []Session

+ UID int32

+ User string

+ func (s *UserSessions) MarshalJSON() ([]byte, error)

+ type UserTemplate struct

+ Contents RawObject

+ Description string

+ GUID uuid.UUID

+ Labels []string

+ Name string

+ func (t UserTemplate) Pack() (put PackedUserTemplate)

+ func (t UserTemplate) WireUserTemplate(thing Thing) WireUserTemplate

+ type VersionInfo struct

+ API ApiInfo

+ Build BuildInfo

+ type WarnResp struct

+ Err error

+ Name string

+ func (wr *WarnResp) UnmarshalJSON(buff []byte) error

+ func (wr WarnResp) MarshalJSON() ([]byte, error)

+ type WellInfo struct

+ Accelerator string

+ Engine string

+ Name string

+ Shards []ShardInfo

+ Tags []string

+ func (wi *WellInfo) Empty() bool

+ func (wi WellInfo) MarshalJSON() ([]byte, error)

+ type WirePivot struct

+ Contents RawObject

+ Description string

+ Disabled bool

+ GUID uuid.UUID

+ Labels []string

+ Name string

+ Updated time.Time

+ func (wp WirePivot) Pivot() Pivot

+ func (wp WirePivot) Thing() (t Thing, err error)

+ type WireSearchLibrary struct

+ func (wsl WireSearchLibrary) Thing() (t Thing, err error)

+ type WireUserFile struct

+ func (w WireUserFile) Thing() (t Thing, err error)

+ type WireUserTemplate struct

+ Contents RawObject

+ Description string

+ GUID uuid.UUID

+ Labels []string

+ Name string

+ Updated time.Time

+ func (w WireUserTemplate) Thing() (t Thing, err error)

+ func (w WireUserTemplate) UserTemplate() (ut UserTemplate)

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL