# By: Riasat Ullah
# This file contains all constants and functions related to the Splunk integration.

# Splunk variables
var_result = 'result'
var_results_link = 'results_link'
var_search_name = 'search_name'
var_server_host = 'server_host'
var_sid = 'sid'
var_source_type = 'sourcetype'
var_raw = '_raw'

# {
#     "session_key": "r41vK7psTN9iIp1HQXqgNxTHPz2AW_Ee3ELbdYM4FBqiBbI7L6f82o6f6IENt6Q_Xdq2V4jBSkjkyIfXIm56xbbcFcpWlcJNB0ZUZaezsImsTQ2lGWH26yiZ8l854Or8SPETrWuVgTKVeC",
#     "search_name": "fail",
#     "results_link": "http://Tuba-MacBook-Pro.local:8000/app/search/search?q=%7Cloadjob%20rt_scheduler__admin__search__fail_at_1464802733_32.0%20%7C%20head%201%20%7C%20tail%201&earliest=0&latest=now",
#     "app": "search",
#     "sid": "rt_scheduler__admin__search__fail_at_1464802733_32.0",
#     "configuration": {
#         "api_url": "http://4kmm916oxm9m.runscope.net"
#     },
#     "server_host": "Tuba-MacBook-Pro.local",
#     "owner": "admin",
#     "results_file": "/Applications/Splunk/var/run/splunk/dispatch/rt_scheduler__admin__search__fail_at_1464802733_32.0/per_result_alert/tmp_0.csv.gz",
#     "server_uri": "https://127.0.0.1:8089",
#     "result": {
#         "date_month": "may",
#         "index": "main",
#         "_indextime": "1464802756",
#         "date_minute": "15",
#         "date_hour": "0",
#         "splunk_server": "Tuba-MacBook-Pro.local",
#         "date_mday": "11",
#         "sourcetype": "secure",
#         "source": "tutorialdata copy 2.zip:./www1/secure.log",
#         "date_second": "2",
#         "_serial": "0",
#         "_sourcetype": "secure",
#         "date_year": "2016",
#         "eventtype": "",
#         "_kv": "1",
#         "timeendpos": "25",
#         "timestartpos": "4",
#         "linecount": "1",
#         "date_zone": "local",
#         "date_wday": "wednesday",
#         "punct": "____::__[]:________...___",
#         "_raw": "Thu May 11 2016 00:15:02 www1 sshd[4747]: Failed password for invalid user jabber from 118.142.68.222 port 3187 ssh2",
#         "_eventtype_color": "",
#         "_confstr": "source::tutorialdata copy 2.zip:./www1/secure.log|host::Tuba-MacBook-Pro.local|secure",
#         "_time": "1462914902",
#         "host": "Tuba-MacBook-Pro.local"
#     }
# }