siem

type GrpcClient struct {
	// contains filtered or unexported fields
}

type InitSIEMRequest struct {

	// SIEM provider identifier (e.g. "splunk", "elastic", "datadog", "sentinel")
	ProviderId string `protobuf:"bytes,1,opt,name=provider_id,json=providerId,proto3" json:"provider_id,omitempty"`
	// Provider-specific configuration (e.g. endpoint, token, index)
	Config *structpb.Struct `protobuf:"bytes,2,opt,name=config,proto3" json:"config,omitempty"`
	// Tenant identifier scoping this SIEM export.
	TenantId string `protobuf:"bytes,3,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type SIEMResponse struct {
	Success bool   `protobuf:"varint,1,opt,name=success,proto3" json:"success,omitempty"`
	Error   string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type SIEMServiceClient interface {
	// Instruct the exporter to start forwarding events to the given SIEM provider.
	InitSIEM(ctx context.Context, in *InitSIEMRequest, opts ...grpc.CallOption) (*SIEMResponse, error)
	// Instruct the exporter to stop all SIEM forwarding.
	TerminateSIEM(ctx context.Context, in *TerminateSIEMRequest, opts ...grpc.CallOption) (*SIEMResponse, error)
}

type SIEMServiceServer interface {
	// Instruct the exporter to start forwarding events to the given SIEM provider.
	InitSIEM(context.Context, *InitSIEMRequest) (*SIEMResponse, error)
	// Instruct the exporter to stop all SIEM forwarding.
	TerminateSIEM(context.Context, *TerminateSIEMRequest) (*SIEMResponse, error)
	// contains filtered or unexported methods
}

type TerminateSIEMRequest struct {

	// Tenant identifier scoping which export to terminate.
	TenantId string `protobuf:"bytes,1,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedSIEMServiceServer struct{}

type UnsafeSIEMServiceServer interface {
	// contains filtered or unexported methods
}