extalert

type AlertCheckAction struct {
	Client FiredAlertsClient
}

type AlertCheckState struct {
	Id                 string
	Name               string
	Url                string
	Start              time.Time
	End                time.Time
	CheckNewAlertsOnly bool
	ExpectedState      string
	StateCheckMode     string
	StateCheckSuccess  bool
	TriggerTime        int64
}

type AlertClient interface {
	Alerts(ctx context.Context) ([]Entry, error)
}

type Content struct {
	Severity    Severity `json:"alert.severity"`
	TriggerTime int64    `json:"trigger_time"`
}

type Entry struct {
	Id      string  `json:"id"`
	Name    string  `json:"name"`
	Author  string  `json:"author"`
	Content Content `json:"content"`
	Links   Links   `json:"links"`
}

type FiredAlertsClient interface {
	FiredAlerts(ctx context.Context, alertUrl string) ([]Entry, error)
}

type Links struct {
	Alerts string `json:"alerts"`
}

type Paging struct {
	Total   int `json:"total"`
	PerPage int `json:"perPage"`
	Offset  int `json:"offset"`
}

type Response struct {
	Paging  Paging  `json:"paging"`
	Entries []Entry `json:"entry"`
}

type Severity int

type SplunkClient struct {
	// contains filtered or unexported fields
}