Interface SplunkV2NodeParameters

Source
interface SplunkV2NodeParameters {
    additionalFields?:
        | {
            adhoc_search_level?: "fast"
            | "smart"
            | "verbose";
            auto_cancel?: number;
            auto_finalize_ec?: number;
            auto_pause?: number;
            earliest_time?: string;
            exec_mode?: "normal" | "blocking" | "oneshot";
            index_earliest?: string;
            index_latest?: string;
            indexedRealtimeOffset?: number;
            latest_time?: string;
            max_time?: number;
            namespace?: string;
            reduce_freq?: number;
            remote_server_list?: string;
            reuse_max_seconds_ago?: number;
            rf?: string;
            search_mode?: "normal" | "realtime";
            status_buckets?: number;
            timeout?: number;
            workload_pool?: string;
        }
        | { email?: string; realname?: string };
    filters?: {
        keyValueMatch?: {
            keyValuePair: { key?: string; value?: string };
        };
    };
    limit?: number;
    name?: string;
    operation?: | "create"
    | "get"
    | "getAll"
    | "update"
    | "getMetrics"
    | "getReport"
    | "deleteReport"
    | "deleteJob"
    | "getResult"
    | "deleteUser";
    options?: | {
        add_orphan_field?: boolean;
        listDefaultActionArgs?: boolean;
    }
    | { add_summary_to_metadata?: boolean };
    password?: string;
    reportId?: { mode: "id" | "list"; value: string };
    resource?: "search" | "user" | "report" | "alert";
    returnAll?: boolean;
    roles?: unknown[];
    search?: string;
    searchJobId?: { mode: "id" | "list"; value: string };
    sort?: {
        values: {
            sort_dir?: "asc" | "desc";
            sort_key?: string;
            sort_mode?: "auto" | "alpha" | "alpha_case" | "num";
        };
    };
    updateFields?: {
        email?: string;
        password?: string;
        realname?: string;
        roles?: unknown[];
    };
    userId?: { mode: "id"
    | "list"; value: string };
}

Properties§

Source§

readonly additionalFields?:
    | {
        adhoc_search_level?: "fast"
        | "smart"
        | "verbose";
        auto_cancel?: number;
        auto_finalize_ec?: number;
        auto_pause?: number;
        earliest_time?: string;
        exec_mode?: "normal" | "blocking" | "oneshot";
        index_earliest?: string;
        index_latest?: string;
        indexedRealtimeOffset?: number;
        latest_time?: string;
        max_time?: number;
        namespace?: string;
        reduce_freq?: number;
        remote_server_list?: string;
        reuse_max_seconds_ago?: number;
        rf?: string;
        search_mode?: "normal" | "realtime";
        status_buckets?: number;
        timeout?: number;
        workload_pool?: string;
    }
    | { email?: string; realname?: string }

Default: {}

Source§

readonly filters?: {
    keyValueMatch?: {
        keyValuePair: { key?: string; value?: string };
    };
}

Default: {}

Source§

readonly limit?: number

Max number of results to return Default: 50 Type options: {"minValue":1}

Source§

readonly name?: string

The name of the report

Source§

readonly operation?:
    | "create"
    | "get"
    | "getAll"
    | "update"
    | "getMetrics"
    | "getReport"
    | "deleteReport"
    | "deleteJob"
    | "getResult"
    | "deleteUser"

Default: "getReport"

Source§

readonly options?:
    | {
        add_orphan_field?: boolean;
        listDefaultActionArgs?: boolean;
    }
    | { add_summary_to_metadata?: boolean }

Default: {}

Source§

readonly password?: string

Type options: {"password":true}

Source§

readonly reportId?: { mode: "id" | "list"; value: string }

Default: {"mode":"list","value":""}

Source§

readonly resource?: "search" | "user" | "report" | "alert"

Default: "search"

Source§

readonly returnAll?: boolean

Whether to return all results or only up to a given limit

Source§

readonly roles?: unknown[]

Comma-separated list of roles to assign to the user. Choose from the list, or specify IDs using an expression. Default: ["user"] Type options: {"loadOptionsMethod":"getRoles"}

Source§

readonly search?: string

Search language string to execute, in Splunk's Search Processing Language Type options: {"rows":2}

Source§

readonly searchJobId?: { mode: "id" | "list"; value: string }

Default: {"mode":"list","value":""}

Source§

readonly sort?: {
    values: {
        sort_dir?: "asc" | "desc";
        sort_key?: string;
        sort_mode?: "auto" | "alpha" | "alpha_case" | "num";
    };
}

Default: {}

Source§

readonly updateFields?: {
    email?: string;
    password?: string;
    realname?: string;
    roles?: unknown[];
}

Default: {}

Source§

readonly userId?: { mode: "id" | "list"; value: string }

Default: {"mode":"list","value":""}