helpers

type Add struct {
	DataTypes []string               `yaml:"data_types"`
	Function  string                 `yaml:"function"`
	Params    map[string]interface{} `yaml:"params"`
	Where     Where                  `yaml:"where"`
}

type Asset struct {
	Name            string   `yaml:"name"`
	Hostnames       []string `yaml:"hostnames"`
	IPs             []string `yaml:"ips"`
	Confidentiality int32    `yaml:"confidentiality"`
	Availability    int32    `yaml:"availability"`
	Integrity       int32    `yaml:"integrity"`
}

type Cast struct {
	DataTypes []string `yaml:"data_types"`
	To        string   `yaml:"to"`
	Fields    []string `yaml:"fields"`
}

type Config struct {
	Kv            []Kv                              `yaml:"kv,omitempty"`
	Grok          []Grok                            `yaml:"grok,omitempty"`
	Trim          []Trim                            `yaml:"trim,omitempty"`
	Json          []Json                            `yaml:"json,omitempty"`
	Csv           []Csv                             `yaml:"csv,omitempty"`
	Rename        []Rename                          `yaml:"rename,omitempty"`
	Cast          []Cast                            `yaml:"cast,omitempty"`
	Reformat      []Reformat                        `yaml:"reformat,omitempty"`
	Delete        []Delete                          `yaml:"delete,omitempty"`
	Tenants       []Tenant                          `yaml:"tenants,omitempty"`
	Drop          []Drop                            `yaml:"drop,omitempty"`
	Add           []Add                             `yaml:"add,omitempty"`
	Patterns      map[string]string                 `yaml:"patterns,omitempty"`
	DisabledRules []int64                           `yaml:"disabled_rules,omitempty"`
	Plugins       map[string]map[string]interface{} `yaml:"plugins,omitempty"`
	Env           Env                               `yaml:"-"`
}

type Csv struct {
	DataTypes []string `yaml:"data_types"`
	Source    string   `yaml:"source"`
	Separator string   `yaml:"separator"`
	Headers   []string `yaml:"headers"`
}

type Delete struct {
	DataTypes []string `yaml:"data_types"`
	Fields    []string `yaml:"fields"`
}

type Drop struct {
	DataTypes []string `yaml:"data_types"`
	Where     Where    `yaml:"where"`
}

type Env struct {
	NodeName   string
	NodeGroups []string
	Workdir    string
	LogLevel   int
}

type Grok struct {
	DataTypes []string  `yaml:"data_types"`
	Patterns  []Pattern `yaml:"patterns"`
}

type Json struct {
	DataTypes []string `yaml:"data_types"`
	Source    string   `yaml:"source"`
}

type Kv struct {
	DataTypes  []string `yaml:"data_types"`
	FieldSplit string   `yaml:"field_split"`
	ValueSplit string   `yaml:"value_split"`
}

type Pattern struct {
	FieldName string `yaml:"field_name"`
	Pattern   string `yaml:"pattern"`
}

type Reformat struct {
	DataTypes  []string `yaml:"data_types"`
	Fields     []string `yaml:"fields"`
	Function   string   `yaml:"function"`
	FromFormat string   `yaml:"from_format"`
	ToFormat   string   `yaml:"to_format"`
}

type Rename struct {
	DataTypes []string `yaml:"data_types"`
	To        string   `yaml:"to"`
	From      []string `yaml:"from"`
}

type Tenant struct {
	Name          string  `yaml:"name"`
	Id            string  `yaml:"id"`
	Assets        []Asset `yaml:"assets"`
	DisabledRules []int64 `yaml:"disabled_rules"`
}

type Trim struct {
	DataTypes []string `yaml:"data_types"`
	Function  string   `yaml:"function"`
	Substring string   `yaml:"substring"`
	Fields    []string `yaml:"fields"`
}

type Variable struct {
	Get    string `yaml:"get"`
	As     string `yaml:"as"`
	OfType string `yaml:"of_type"`
}

type Where struct {
	Variables  []Variable `yaml:"variables"`
	Expression string     `yaml:"expression"`
}