@splunk/visualizations 28.5.3 → 28.7.0

package/docs-llm/events/examples-json.md

@@ -0,0 +1,705 @@
+# Events Examples
+
+**Visualization Reference:** undefined
+
+## Basic Events
+
+- **Key:** Basic
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5
+      }
+    }
+  }
+}
+```
+
+## Event Actions
+
+- **Key:** Event Actions
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600,
+    "eventActions": [
+      {
+        "eventType": "eventAction.showSource.click",
+        "label": "Show Source"
+      },
+      {
+        "eventType": "eventAction.buildEventType.click",
+        "label": "Build Event Type",
+        "eventtypeValues": [],
+        "fieldFilters": []
+      },
+      {
+        "eventType": "eventAction.extractFields.click",
+        "label": "Extract Fields",
+        "eventtypeValues": [
+          "*"
+        ],
+        "fieldFilters": [
+          "*"
+        ]
+      },
+      {
+        "eventType": "eventAction.eventTypeValueExists.click",
+        "label": "Show If h* Field Exists on Event",
+        "eventtypeValues": [],
+        "fieldFilters": [
+          "h*"
+        ]
+      },
+      {
+        "eventType": "eventAction.eventTypeValueExists.click",
+        "label": "Show If Eventtype Value Exists",
+        "eventtypeValues": [
+          "valueA"
+        ],
+        "fieldFilters": []
+      }
+    ]
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5
+      }
+    }
+  }
+}
+```
+
+## Field Actions
+
+- **Key:** Field Actions
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600,
+    "fieldActions": {
+      "*": [
+        {
+          "eventType": "fieldAction.commonAction1.click",
+          "label": "Common Action 1"
+        },
+        {
+          "eventType": "fieldAction.commonAction2.click",
+          "label": "Common Action 2"
+        },
+        {
+          "eventType": "fieldAction.specificSourceAction1.click",
+          "label": "Specific Source Action 1",
+          "eventtypeValues": [
+            "valueA"
+          ]
+        }
+      ],
+      "host": [
+        {
+          "eventType": "fieldAction.specificHostAction1.click",
+          "label": "Specific Host Action 1"
+        }
+      ],
+      "source": [
+        {
+          "eventType": "fieldAction.specificSourceAction1.click",
+          "label": "Specific Source Action 1"
+        }
+      ],
+      "source*": [
+        {
+          "eventType": "fieldAction.startsWithSource.click",
+          "label": "Action for source* Fields: matches $@field_name$"
+        }
+      ]
+    }
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5
+      }
+    }
+  }
+}
+```
+
+## Field Summary with fieldsummary Datasource
+
+- **Key:** Field Summary
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5
+      }
+    }
+  }
+}
+```
+
+## Footer Fields and Field Value Highlighting
+
+- **Key:** Footer And Highlighting
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600,
+    "footerFields": [
+      "host",
+      "source",
+      "sourcetype"
+    ],
+    "highlightValuesByField": {
+      "host": "jbreeden-mbpr15",
+      "sourcetype": "splunkd"
+    }
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5
+      }
+    }
+  }
+}
+```
+
+## Tags
+
+- **Key:** Tags
+
+```json
+{
+  "context": {},
+  "options": {
+    "height": 600,
+    "footerFields": [
+      "host",
+      "source",
+      "sourcetype"
+    ]
+  },
+  "dataSources": {
+    "primary": {
+      "requestParams": {
+        "offset": 0,
+        "count": 5
+      },
+      "data": {
+        "fields": [
+          {
+            "name": "host"
+          },
+          {
+            "name": "source"
+          },
+          {
+            "name": "sourcetype"
+          },
+          {
+            "name": "index"
+          },
+          {
+            "name": "linecount"
+          },
+          {
+            "name": "_raw"
+          },
+          {
+            "name": "_time"
+          }
+        ],
+        "columns": [
+          [
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15",
+            "jbreeden-mbpr15"
+          ],
+          [
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log",
+            "/Users/jbreeden/splunk/releases-builds/splunk-nightlight/splunk/var/log/splunk/metrics.log"
+          ],
+          [
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd",
+            "splunkd"
+          ],
+          [
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal",
+            "_internal"
+          ],
+          [
+            "1",
+            "1",
+            "1",
+            "1",
+            "1"
+          ],
+          [
+            "{\"datetime\":\"07-16-2018 16:38:11.545 -0700\",\"log_level\":\"INFO\",\"component\":\"KVStoreServerStats\",\"data\":{\"host\":\"ssingamneni-mbp13:8191\",\"pid\":21585,\"uptime\":20886}}",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625",
+            "04-02-2018 16:33:49.691 -0700 INFO  Metrics - group=thruput, name=thruput, instantaneous_kbps=0.8775482519547254, instantaneous_eps=3.5802456751680514, average_kbps=0.7280928568987709, total_k_processed=4794, kb=27.20703125, ev=111, load_average=2.87744140625"
+          ],
+          [
+            "2018-07-16T16:38:11.545-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700",
+            "2018-04-02T16:33:49.691-0700"
+          ]
+        ]
+      },
+      "meta": {
+        "totalCount": 5,
+        "tags": {
+          "sourcetype": {
+            "splunkd": [
+              "tag1",
+              "tag2"
+            ]
+          },
+          "index": {
+            "_internal": [
+              "0_=.Aa"
+            ]
+          }
+        }
+      }
+    }
+  }
+}
+```