splunk

type DiscoveryRequest struct {
	Search string
	Limit  int
}

type DiscoveryResult struct {
	Fields     []string `json:"fields"`
	Count      int      `json:"count"`
	Coverage   string   `json:"coverage"`
	Truncated  bool     `json:"truncated"`
	Truncation []string `json:"truncation"`
}

type ReadRequest struct {
	Filters  map[string]string
	Lookback time.Duration
	Limit    int
}

type ReadResult struct {
	Records    []Record `json:"records"`
	Count      int      `json:"count"`
	Partial    bool     `json:"partial"`
	Truncated  bool     `json:"truncated"`
	Truncation []string `json:"truncation,omitempty"`
}

type Record struct {
	Timestamp string            `json:"timestamp"`
	Message   string            `json:"message"`
	Fields    map[string]string `json:"fields"`
}

type Service struct {
	// contains filtered or unexported fields
}