cribl-control-plane 0.5.0-beta.5 → 0.5.0-beta.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commonjs/lib/config.d.ts +3 -3
- package/dist/commonjs/lib/config.js +3 -3
- package/dist/commonjs/models/functionconfschemaaggregatemetrics.d.ts +8 -8
- package/dist/commonjs/models/functionconfschemaaggregatemetrics.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaaggregation.d.ts +8 -8
- package/dist/commonjs/models/functionconfschemaaggregation.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemacef.d.ts +1 -1
- package/dist/commonjs/models/functionconfschemacef.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemadistinct.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemadistinct.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemadropdimensions.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemadropdimensions.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemadynamicsampling.d.ts +5 -5
- package/dist/commonjs/models/functionconfschemadynamicsampling.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaeventbreaker.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemaeventbreaker.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaeventstats.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemaeventstats.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemageoip.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemageoip.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemagrok.d.ts +1 -1
- package/dist/commonjs/models/functionconfschemagrok.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemahandlebars.d.ts +4 -4
- package/dist/commonjs/models/functionconfschemahandlebars.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemalakeexport.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemalakeexport.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemalookup.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemalookup.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemamask.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemamask.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemamvexpand.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemamvexpand.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemamvpull.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemamvpull.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemanotify.d.ts +4 -4
- package/dist/commonjs/models/functionconfschemanotify.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemapack.d.ts +1 -1
- package/dist/commonjs/models/functionconfschemapack.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaredis.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemaredis.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaregexextract.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemaregexextract.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemasend.d.ts +4 -4
- package/dist/commonjs/models/functionconfschemasend.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemasensitivedatascanner.d.ts +4 -4
- package/dist/commonjs/models/functionconfschemasensitivedatascanner.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaserde.d.ts +3 -3
- package/dist/commonjs/models/functionconfschemaserde.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaserialize.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemaserialize.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemastore.d.ts +7 -7
- package/dist/commonjs/models/functionconfschemastore.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemasuppress.d.ts +6 -6
- package/dist/commonjs/models/functionconfschemasuppress.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschematee.d.ts +1 -1
- package/dist/commonjs/models/functionconfschematee.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaunroll.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemaunroll.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemawindow.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemawindow.d.ts.map +1 -1
- package/dist/commonjs/models/functionconfschemaxmlunroll.d.ts +2 -2
- package/dist/commonjs/models/functionconfschemaxmlunroll.d.ts.map +1 -1
- package/dist/commonjs/models/pipeline.d.ts +1 -1
- package/dist/commonjs/models/pipeline.d.ts.map +1 -1
- package/dist/commonjs/models/pipelinefunctioncef.d.ts +1 -1
- package/dist/commonjs/models/pipelinefunctioncef.d.ts.map +1 -1
- package/dist/commonjs/models/runnablejobcollection.d.ts +37 -37
- package/dist/commonjs/models/runnablejobcollection.d.ts.map +1 -1
- package/dist/commonjs/models/runnablejobexecutor.d.ts +21 -21
- package/dist/commonjs/models/runnablejobexecutor.d.ts.map +1 -1
- package/dist/commonjs/models/runnablejobscheduledsearch.d.ts +16 -16
- package/dist/commonjs/models/runnablejobscheduledsearch.d.ts.map +1 -1
- package/dist/esm/lib/config.d.ts +3 -3
- package/dist/esm/lib/config.js +3 -3
- package/dist/esm/models/functionconfschemaaggregatemetrics.d.ts +8 -8
- package/dist/esm/models/functionconfschemaaggregatemetrics.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaaggregation.d.ts +8 -8
- package/dist/esm/models/functionconfschemaaggregation.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemacef.d.ts +1 -1
- package/dist/esm/models/functionconfschemacef.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemadistinct.d.ts +3 -3
- package/dist/esm/models/functionconfschemadistinct.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemadropdimensions.d.ts +2 -2
- package/dist/esm/models/functionconfschemadropdimensions.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemadynamicsampling.d.ts +5 -5
- package/dist/esm/models/functionconfschemadynamicsampling.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaeventbreaker.d.ts +2 -2
- package/dist/esm/models/functionconfschemaeventbreaker.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaeventstats.d.ts +2 -2
- package/dist/esm/models/functionconfschemaeventstats.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemageoip.d.ts +2 -2
- package/dist/esm/models/functionconfschemageoip.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemagrok.d.ts +1 -1
- package/dist/esm/models/functionconfschemagrok.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemahandlebars.d.ts +4 -4
- package/dist/esm/models/functionconfschemahandlebars.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemalakeexport.d.ts +3 -3
- package/dist/esm/models/functionconfschemalakeexport.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemalookup.d.ts +2 -2
- package/dist/esm/models/functionconfschemalookup.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemamask.d.ts +3 -3
- package/dist/esm/models/functionconfschemamask.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemamvexpand.d.ts +2 -2
- package/dist/esm/models/functionconfschemamvexpand.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemamvpull.d.ts +2 -2
- package/dist/esm/models/functionconfschemamvpull.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemanotify.d.ts +4 -4
- package/dist/esm/models/functionconfschemanotify.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemapack.d.ts +1 -1
- package/dist/esm/models/functionconfschemapack.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaredis.d.ts +3 -3
- package/dist/esm/models/functionconfschemaredis.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaregexextract.d.ts +3 -3
- package/dist/esm/models/functionconfschemaregexextract.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemasend.d.ts +4 -4
- package/dist/esm/models/functionconfschemasend.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemasensitivedatascanner.d.ts +4 -4
- package/dist/esm/models/functionconfschemasensitivedatascanner.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaserde.d.ts +3 -3
- package/dist/esm/models/functionconfschemaserde.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaserialize.d.ts +2 -2
- package/dist/esm/models/functionconfschemaserialize.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemastore.d.ts +7 -7
- package/dist/esm/models/functionconfschemastore.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemasuppress.d.ts +6 -6
- package/dist/esm/models/functionconfschemasuppress.d.ts.map +1 -1
- package/dist/esm/models/functionconfschematee.d.ts +1 -1
- package/dist/esm/models/functionconfschematee.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaunroll.d.ts +2 -2
- package/dist/esm/models/functionconfschemaunroll.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemawindow.d.ts +2 -2
- package/dist/esm/models/functionconfschemawindow.d.ts.map +1 -1
- package/dist/esm/models/functionconfschemaxmlunroll.d.ts +2 -2
- package/dist/esm/models/functionconfschemaxmlunroll.d.ts.map +1 -1
- package/dist/esm/models/pipeline.d.ts +1 -1
- package/dist/esm/models/pipeline.d.ts.map +1 -1
- package/dist/esm/models/pipelinefunctioncef.d.ts +1 -1
- package/dist/esm/models/pipelinefunctioncef.d.ts.map +1 -1
- package/dist/esm/models/runnablejobcollection.d.ts +37 -37
- package/dist/esm/models/runnablejobcollection.d.ts.map +1 -1
- package/dist/esm/models/runnablejobexecutor.d.ts +21 -21
- package/dist/esm/models/runnablejobexecutor.d.ts.map +1 -1
- package/dist/esm/models/runnablejobscheduledsearch.d.ts +16 -16
- package/dist/esm/models/runnablejobscheduledsearch.d.ts.map +1 -1
- package/examples/example-edge.ts +1 -0
- package/examples/example-packs.ts +1 -0
- package/examples/example-stream.ts +1 -0
- package/examples/package-lock.json +1 -1
- package/jsr.json +1 -1
- package/package.json +1 -1
- package/src/lib/config.ts +3 -3
- package/src/models/functionconfschemaaggregatemetrics.ts +8 -8
- package/src/models/functionconfschemaaggregation.ts +8 -8
- package/src/models/functionconfschemacef.ts +1 -1
- package/src/models/functionconfschemadistinct.ts +3 -3
- package/src/models/functionconfschemadropdimensions.ts +2 -2
- package/src/models/functionconfschemadynamicsampling.ts +5 -5
- package/src/models/functionconfschemaeventbreaker.ts +2 -2
- package/src/models/functionconfschemaeventstats.ts +2 -2
- package/src/models/functionconfschemageoip.ts +2 -2
- package/src/models/functionconfschemagrok.ts +1 -1
- package/src/models/functionconfschemahandlebars.ts +4 -4
- package/src/models/functionconfschemalakeexport.ts +3 -3
- package/src/models/functionconfschemalookup.ts +2 -2
- package/src/models/functionconfschemamask.ts +3 -3
- package/src/models/functionconfschemamvexpand.ts +2 -2
- package/src/models/functionconfschemamvpull.ts +2 -2
- package/src/models/functionconfschemanotify.ts +4 -4
- package/src/models/functionconfschemapack.ts +1 -1
- package/src/models/functionconfschemaredis.ts +3 -3
- package/src/models/functionconfschemaregexextract.ts +3 -3
- package/src/models/functionconfschemasend.ts +4 -4
- package/src/models/functionconfschemasensitivedatascanner.ts +4 -4
- package/src/models/functionconfschemaserde.ts +3 -3
- package/src/models/functionconfschemaserialize.ts +2 -2
- package/src/models/functionconfschemastore.ts +7 -7
- package/src/models/functionconfschemasuppress.ts +6 -6
- package/src/models/functionconfschematee.ts +1 -1
- package/src/models/functionconfschemaunroll.ts +2 -2
- package/src/models/functionconfschemawindow.ts +2 -2
- package/src/models/functionconfschemaxmlunroll.ts +2 -2
- package/src/models/pipeline.ts +1 -1
- package/src/models/pipelinefunctioncef.ts +1 -1
- package/src/models/runnablejobcollection.ts +37 -37
- package/src/models/runnablejobexecutor.ts +21 -21
- package/src/models/runnablejobscheduledsearch.ts +16 -16
|
@@ -23,7 +23,7 @@ export type FunctionConfSchemaHandlebarsTemplateDefinition = {
|
|
|
23
23
|
/**
|
|
24
24
|
* Type categorization for the template (e.g., Universal, Email, Slack)
|
|
25
25
|
*/
|
|
26
|
-
type
|
|
26
|
+
type: string;
|
|
27
27
|
};
|
|
28
28
|
|
|
29
29
|
export type FunctionConfSchemaHandlebars = {
|
|
@@ -34,15 +34,15 @@ export type FunctionConfSchemaHandlebars = {
|
|
|
34
34
|
/**
|
|
35
35
|
* Field name to store the rendered template result. Defaults to _raw.
|
|
36
36
|
*/
|
|
37
|
-
targetField
|
|
37
|
+
targetField: string;
|
|
38
38
|
/**
|
|
39
39
|
* Parse the rendered template as JSON and store as an object instead of a string. Useful for building structured data like Slack blocks.
|
|
40
40
|
*/
|
|
41
|
-
parseJson
|
|
41
|
+
parseJson: boolean;
|
|
42
42
|
/**
|
|
43
43
|
* Remove the target field if the rendered result is empty or null.
|
|
44
44
|
*/
|
|
45
|
-
removeOnNull
|
|
45
|
+
removeOnNull: boolean;
|
|
46
46
|
};
|
|
47
47
|
|
|
48
48
|
/** @internal */
|
|
@@ -19,15 +19,15 @@ export type FunctionConfSchemaLakeExport = {
|
|
|
19
19
|
/**
|
|
20
20
|
* Name of the lake
|
|
21
21
|
*/
|
|
22
|
-
lake
|
|
22
|
+
lake: string;
|
|
23
23
|
/**
|
|
24
24
|
* Tee results to search. When set to true results will be shipped instead of stats
|
|
25
25
|
*/
|
|
26
|
-
tee
|
|
26
|
+
tee: string;
|
|
27
27
|
/**
|
|
28
28
|
* How often are stats flushed in ms
|
|
29
29
|
*/
|
|
30
|
-
flushMs
|
|
30
|
+
flushMs: number;
|
|
31
31
|
/**
|
|
32
32
|
* Disables generation of intermediate stats. When true stats will be emitted only on end
|
|
33
33
|
*/
|
|
@@ -41,7 +41,7 @@ export type FunctionConfSchemaLookup = {
|
|
|
41
41
|
/**
|
|
42
42
|
* Enable to use a disk-based lookup. This option displays only the settings relevant to disk-based mode and hides those for in-memory lookups.
|
|
43
43
|
*/
|
|
44
|
-
dbLookup
|
|
44
|
+
dbLookup: boolean;
|
|
45
45
|
matchMode?: any | undefined;
|
|
46
46
|
matchType?: any | undefined;
|
|
47
47
|
reloadPeriodSec?: any | undefined;
|
|
@@ -56,7 +56,7 @@ export type FunctionConfSchemaLookup = {
|
|
|
56
56
|
/**
|
|
57
57
|
* Add the looked-up values to _raw, as key=value pairs
|
|
58
58
|
*/
|
|
59
|
-
addToEvent
|
|
59
|
+
addToEvent: boolean;
|
|
60
60
|
ignoreCase?: any | undefined;
|
|
61
61
|
};
|
|
62
62
|
|
|
@@ -15,11 +15,11 @@ export type FunctionConfSchemaMaskRule = {
|
|
|
15
15
|
/**
|
|
16
16
|
* A JavaScript expression or literal to replace the matching content. Capturing groups can be referenced as g1, g2, and so on, and event fields as event.<fieldName>.
|
|
17
17
|
*/
|
|
18
|
-
replaceExpr
|
|
18
|
+
replaceExpr: string;
|
|
19
19
|
/**
|
|
20
20
|
* Set to No to disable the evaluation of an individual rule
|
|
21
21
|
*/
|
|
22
|
-
disabled
|
|
22
|
+
disabled: boolean;
|
|
23
23
|
};
|
|
24
24
|
|
|
25
25
|
export type FunctionConfSchemaMaskFlag = {
|
|
@@ -39,7 +39,7 @@ export type FunctionConfSchemaMask = {
|
|
|
39
39
|
/**
|
|
40
40
|
* Depth to which the Mask Function will search for fields to mask
|
|
41
41
|
*/
|
|
42
|
-
depth
|
|
42
|
+
depth: number;
|
|
43
43
|
/**
|
|
44
44
|
* Fields to evaluate if one or more masking rules are matched
|
|
45
45
|
*/
|
|
@@ -41,7 +41,7 @@ export type FunctionConfSchemaMvExpand = {
|
|
|
41
41
|
/**
|
|
42
42
|
* max. number of rows generated out of every source events
|
|
43
43
|
*/
|
|
44
|
-
rowLimit
|
|
44
|
+
rowLimit: number;
|
|
45
45
|
/**
|
|
46
46
|
* name of an optional index property generated into the output
|
|
47
47
|
*/
|
|
@@ -49,7 +49,7 @@ export type FunctionConfSchemaMvExpand = {
|
|
|
49
49
|
/**
|
|
50
50
|
* decides if bag-values are expanded to bags or arrays
|
|
51
51
|
*/
|
|
52
|
-
bagExpansionMode
|
|
52
|
+
bagExpansionMode: FunctionConfSchemaMvExpandBagExpansionMode;
|
|
53
53
|
};
|
|
54
54
|
|
|
55
55
|
/** @internal */
|
|
@@ -23,11 +23,11 @@ export type FunctionConfSchemaMvPull = {
|
|
|
23
23
|
/**
|
|
24
24
|
* Optionally, specify a bag as the target for K-V entries. If not specified, these entries are stored on each top-level event.
|
|
25
25
|
*/
|
|
26
|
-
targetBagPath
|
|
26
|
+
targetBagPath: string | null;
|
|
27
27
|
/**
|
|
28
28
|
* Toggle this on to remove each original array of data objects after extraction. If toggled off, arrays are retained.
|
|
29
29
|
*/
|
|
30
|
-
deleteOriginal
|
|
30
|
+
deleteOriginal: boolean;
|
|
31
31
|
};
|
|
32
32
|
|
|
33
33
|
/** @internal */
|
|
@@ -69,11 +69,11 @@ export type FunctionConfSchemaNotify = {
|
|
|
69
69
|
/**
|
|
70
70
|
* Group the notification belongs to
|
|
71
71
|
*/
|
|
72
|
-
group
|
|
72
|
+
group: string;
|
|
73
73
|
/**
|
|
74
74
|
* Workspace within the deployment to send the search results to.
|
|
75
75
|
*/
|
|
76
|
-
notificationId
|
|
76
|
+
notificationId: string;
|
|
77
77
|
/**
|
|
78
78
|
* Id of the search this function is running on.
|
|
79
79
|
*/
|
|
@@ -97,11 +97,11 @@ export type FunctionConfSchemaNotify = {
|
|
|
97
97
|
/**
|
|
98
98
|
* How many results that match trigger the condition
|
|
99
99
|
*/
|
|
100
|
-
triggerCount
|
|
100
|
+
triggerCount: number;
|
|
101
101
|
/**
|
|
102
102
|
* Number of results to include in the notification event
|
|
103
103
|
*/
|
|
104
|
-
resultsLimit
|
|
104
|
+
resultsLimit: number;
|
|
105
105
|
/**
|
|
106
106
|
* Url of the search results
|
|
107
107
|
*/
|
|
@@ -79,12 +79,12 @@ export type FunctionConfSchemaRedis = {
|
|
|
79
79
|
/**
|
|
80
80
|
* How the Redis server is configured. Defaults to Standalone
|
|
81
81
|
*/
|
|
82
|
-
deploymentType
|
|
83
|
-
authType
|
|
82
|
+
deploymentType: FunctionConfSchemaRedisDeploymentType;
|
|
83
|
+
authType: FunctionConfSchemaRedisAuthenticationMethod;
|
|
84
84
|
/**
|
|
85
85
|
* Maximum amount of time (seconds) to wait before assuming that Redis is down and passing events through. Use 0 to disable.
|
|
86
86
|
*/
|
|
87
|
-
maxBlockSecs
|
|
87
|
+
maxBlockSecs: number;
|
|
88
88
|
/**
|
|
89
89
|
* Enable client-side cache. Redundant when using Redis write operations. See more options at Settings > General > Limits > Redis Cache.
|
|
90
90
|
*/
|
|
@@ -23,11 +23,11 @@ export type FunctionConfSchemaRegexExtract = {
|
|
|
23
23
|
/**
|
|
24
24
|
* Field on which to perform regex field extraction
|
|
25
25
|
*/
|
|
26
|
-
source
|
|
26
|
+
source: string;
|
|
27
27
|
/**
|
|
28
28
|
* The maximum number of times to apply regex to source field when the global flag is set, or when using _NAME_ and _VALUE_ capturing groups
|
|
29
29
|
*/
|
|
30
|
-
iterations
|
|
30
|
+
iterations: number;
|
|
31
31
|
/**
|
|
32
32
|
* JavaScript expression to format field names when _NAME_n and _VALUE_n capturing groups are used. Original field name is in global variable 'name'. Example: To append XX to all field names, use `${name}_XX` (backticks are literal). If empty, names will be sanitized using this regex: /^[_0-9]+|[^a-zA-Z0-9_]+/g. You can access other fields values via __e.<fieldName>.
|
|
33
33
|
*/
|
|
@@ -35,7 +35,7 @@ export type FunctionConfSchemaRegexExtract = {
|
|
|
35
35
|
/**
|
|
36
36
|
* Overwrite existing event fields with extracted values. If disabled, existing fields will be converted to an array.
|
|
37
37
|
*/
|
|
38
|
-
overwrite
|
|
38
|
+
overwrite: boolean;
|
|
39
39
|
};
|
|
40
40
|
|
|
41
41
|
/** @internal */
|
|
@@ -31,11 +31,11 @@ export type FunctionConfSchemaSend = {
|
|
|
31
31
|
/**
|
|
32
32
|
* Group within the workspace we're sending to.
|
|
33
33
|
*/
|
|
34
|
-
group
|
|
34
|
+
group: string;
|
|
35
35
|
/**
|
|
36
36
|
* Workspace within the deployment to send the search results to.
|
|
37
37
|
*/
|
|
38
|
-
workspace
|
|
38
|
+
workspace: string;
|
|
39
39
|
/**
|
|
40
40
|
* Template to build the URL to send from.
|
|
41
41
|
*/
|
|
@@ -47,11 +47,11 @@ export type FunctionConfSchemaSend = {
|
|
|
47
47
|
/**
|
|
48
48
|
* Tee results to search. When set to true results will be shipped instead of stats
|
|
49
49
|
*/
|
|
50
|
-
tee
|
|
50
|
+
tee: string;
|
|
51
51
|
/**
|
|
52
52
|
* How often are stats flushed in ms
|
|
53
53
|
*/
|
|
54
|
-
flushMs
|
|
54
|
+
flushMs: number;
|
|
55
55
|
/**
|
|
56
56
|
* Disables generation of intermediate stats. When true stats will be emitted only on end
|
|
57
57
|
*/
|
|
@@ -15,8 +15,8 @@ export type FunctionConfSchemaSensitiveDataScannerRule = {
|
|
|
15
15
|
/**
|
|
16
16
|
* A JavaScript expression or literal to replace the matching content. Capturing groups can be referenced as g1, g2, and so on, and event fields as event.<fieldName>.
|
|
17
17
|
*/
|
|
18
|
-
replaceExpr
|
|
19
|
-
disabled
|
|
18
|
+
replaceExpr: string;
|
|
19
|
+
disabled: boolean;
|
|
20
20
|
};
|
|
21
21
|
|
|
22
22
|
export type FunctionConfSchemaSensitiveDataScannerFlag = {
|
|
@@ -41,8 +41,8 @@ export type FunctionConfSchemaSensitiveDataScanner = {
|
|
|
41
41
|
/**
|
|
42
42
|
* Add matching ruleset IDs to a field called "__detected"
|
|
43
43
|
*/
|
|
44
|
-
includeDetectedRules
|
|
45
|
-
backgroundDetection
|
|
44
|
+
includeDetectedRules: boolean;
|
|
45
|
+
backgroundDetection: boolean;
|
|
46
46
|
};
|
|
47
47
|
|
|
48
48
|
/** @internal */
|
|
@@ -77,11 +77,11 @@ export type FunctionConfSchemaSerde = {
|
|
|
77
77
|
/**
|
|
78
78
|
* Extract creates new fields. Reserialize extracts and filters fields, and then reserializes.
|
|
79
79
|
*/
|
|
80
|
-
mode
|
|
80
|
+
mode: FunctionConfSchemaSerdeOperationMode;
|
|
81
81
|
/**
|
|
82
82
|
* Parser or formatter type to use
|
|
83
83
|
*/
|
|
84
|
-
type
|
|
84
|
+
type: FunctionConfSchemaSerdeType;
|
|
85
85
|
delimChar?: any | undefined;
|
|
86
86
|
quoteChar?: any | undefined;
|
|
87
87
|
escapeChar?: any | undefined;
|
|
@@ -89,7 +89,7 @@ export type FunctionConfSchemaSerde = {
|
|
|
89
89
|
/**
|
|
90
90
|
* Field containing text to be parsed
|
|
91
91
|
*/
|
|
92
|
-
srcField
|
|
92
|
+
srcField: string;
|
|
93
93
|
/**
|
|
94
94
|
* Name of the field to add fields to. Extract mode only.
|
|
95
95
|
*/
|
|
@@ -49,7 +49,7 @@ export type FunctionConfSchemaSerialize = {
|
|
|
49
49
|
/**
|
|
50
50
|
* Data output format
|
|
51
51
|
*/
|
|
52
|
-
type
|
|
52
|
+
type: FunctionConfSchemaSerializeType;
|
|
53
53
|
delimChar?: any | undefined;
|
|
54
54
|
quoteChar?: any | undefined;
|
|
55
55
|
escapeChar?: any | undefined;
|
|
@@ -65,7 +65,7 @@ export type FunctionConfSchemaSerialize = {
|
|
|
65
65
|
/**
|
|
66
66
|
* Field to serialize data to
|
|
67
67
|
*/
|
|
68
|
-
dstField
|
|
68
|
+
dstField: string;
|
|
69
69
|
};
|
|
70
70
|
|
|
71
71
|
/** @internal */
|
|
@@ -16,7 +16,7 @@ export type FunctionConfSchemaStore = {
|
|
|
16
16
|
/**
|
|
17
17
|
* The type of knowledge object, generated by the function (i.e., 'lookup')
|
|
18
18
|
*/
|
|
19
|
-
type
|
|
19
|
+
type: string;
|
|
20
20
|
/**
|
|
21
21
|
* Configures where and how the data should be stored
|
|
22
22
|
*/
|
|
@@ -32,27 +32,27 @@ export type FunctionConfSchemaStore = {
|
|
|
32
32
|
/**
|
|
33
33
|
* Character to be used as value delimiter in output
|
|
34
34
|
*/
|
|
35
|
-
separator
|
|
35
|
+
separator: string;
|
|
36
36
|
/**
|
|
37
37
|
* For existing files, an error is thrown if overwrite is false or the file is replaced if overwrite is true
|
|
38
38
|
*/
|
|
39
|
-
overwrite
|
|
39
|
+
overwrite: boolean;
|
|
40
40
|
/**
|
|
41
41
|
* True will compress output, false leaves it as it is and auto decides based on size
|
|
42
42
|
*/
|
|
43
|
-
compress
|
|
43
|
+
compress: string;
|
|
44
44
|
/**
|
|
45
45
|
* Tee results to the next operator
|
|
46
46
|
*/
|
|
47
|
-
tee
|
|
47
|
+
tee: boolean;
|
|
48
48
|
/**
|
|
49
49
|
* Limits how many events can be stored
|
|
50
50
|
*/
|
|
51
|
-
maxEvents
|
|
51
|
+
maxEvents: number;
|
|
52
52
|
/**
|
|
53
53
|
* Suppresses the timer-based export stats generating
|
|
54
54
|
*/
|
|
55
|
-
suppressPreviews
|
|
55
|
+
suppressPreviews: boolean;
|
|
56
56
|
};
|
|
57
57
|
|
|
58
58
|
/** @internal */
|
|
@@ -15,27 +15,27 @@ export type FunctionConfSchemaSuppress = {
|
|
|
15
15
|
/**
|
|
16
16
|
* The number of events to allow per time period
|
|
17
17
|
*/
|
|
18
|
-
allow
|
|
18
|
+
allow: number;
|
|
19
19
|
/**
|
|
20
20
|
* The number of seconds to suppress events after 'Number to allow' events are received
|
|
21
21
|
*/
|
|
22
|
-
suppressPeriodSec
|
|
22
|
+
suppressPeriodSec: number;
|
|
23
23
|
/**
|
|
24
24
|
* If disabled, suppressed events will be tagged with suppress=1 but not dropped
|
|
25
25
|
*/
|
|
26
|
-
dropEventsMode
|
|
26
|
+
dropEventsMode: boolean;
|
|
27
27
|
/**
|
|
28
28
|
* The maximum number of keys that can be cached before idle entries are removed. Leave at default unless you understand the implications of changing.
|
|
29
29
|
*/
|
|
30
|
-
maxCacheSize
|
|
30
|
+
maxCacheSize: number;
|
|
31
31
|
/**
|
|
32
32
|
* The number of suppression periods 'Suppression Period' of inactivity before a cache entry is considered idle. Leave at default unless you understand the implications of changing.
|
|
33
33
|
*/
|
|
34
|
-
cacheIdleTimeoutPeriods
|
|
34
|
+
cacheIdleTimeoutPeriods: number;
|
|
35
35
|
/**
|
|
36
36
|
* Check cache for idle sessions every N events when cache size is > 'Maximum Cache Size'. Leave at default unless you understand the implications of changing.
|
|
37
37
|
*/
|
|
38
|
-
numEventsIdleTimeoutTrigger
|
|
38
|
+
numEventsIdleTimeoutTrigger: number;
|
|
39
39
|
};
|
|
40
40
|
|
|
41
41
|
/** @internal */
|
|
@@ -11,11 +11,11 @@ export type FunctionConfSchemaUnroll = {
|
|
|
11
11
|
/**
|
|
12
12
|
* Field in which to find/calculate the array to unroll. Example: _raw, _raw.split(/\n/)
|
|
13
13
|
*/
|
|
14
|
-
srcExpr
|
|
14
|
+
srcExpr: string;
|
|
15
15
|
/**
|
|
16
16
|
* Field in destination event in which to place the unrolled value
|
|
17
17
|
*/
|
|
18
|
-
dstField
|
|
18
|
+
dstField: string;
|
|
19
19
|
};
|
|
20
20
|
|
|
21
21
|
/** @internal */
|
|
@@ -19,11 +19,11 @@ export type FunctionConfSchemaWindow = {
|
|
|
19
19
|
/**
|
|
20
20
|
* Number of events to keep before the current event in the window
|
|
21
21
|
*/
|
|
22
|
-
tailEventCount
|
|
22
|
+
tailEventCount: number;
|
|
23
23
|
/**
|
|
24
24
|
* Number of events to keep after the current event in the window
|
|
25
25
|
*/
|
|
26
|
-
headEventCount
|
|
26
|
+
headEventCount: number;
|
|
27
27
|
};
|
|
28
28
|
|
|
29
29
|
/** @internal */
|
|
@@ -19,11 +19,11 @@ export type FunctionConfSchemaXmlUnroll = {
|
|
|
19
19
|
/**
|
|
20
20
|
* Add a field with this name, containing the index at which the item was located, starting from 0
|
|
21
21
|
*/
|
|
22
|
-
unrollIdxField
|
|
22
|
+
unrollIdxField: string;
|
|
23
23
|
/**
|
|
24
24
|
* Pretty print the output XML
|
|
25
25
|
*/
|
|
26
|
-
pretty
|
|
26
|
+
pretty: boolean;
|
|
27
27
|
};
|
|
28
28
|
|
|
29
29
|
/** @internal */
|
package/src/models/pipeline.ts
CHANGED