models module
Provides SumoLogic related models for data mapping.
- class hutch.security.sumologic.models.SearchJob(*, id: str, state: str, recordCount: int = None, messageCount: int = None, pendingErrors: List[str] = None, pendingWarnings: List[str] = None, histogramBuckets: List[hutch.security.sumologic.models.SearchJobHistogramBucket] = None, **extra_data: Any)[source]
Bases:
pydantic.main.BaseModel
Maps a search job into native data types.
- histogram_buckets: List[hutch.security.sumologic.models.SearchJobHistogramBucket]
- id: str
- message_count: int
- pending_errors: List[str]
- pending_warnings: List[str]
- record_count: int
- state: str
- class hutch.security.sumologic.models.SearchJobField(*, name: str, keyField: bool = None, fieldType: str = None)[source]
Bases:
pydantic.main.BaseModel
Maps message ‘fields’ returned by a search job into native data types.
- field_type: str
- key_field: bool
- name: str
- class hutch.security.sumologic.models.SearchJobHistogramBucket(*, length: int, count: int, startTimestamp: datetime.datetime = None, **extra_data: Any)[source]
Bases:
pydantic.main.BaseModel
Maps a search job’s ‘histogram bucket’ entries into native data types.
- classmethod convert_usec_to_native(v)[source]
Converts a miliseconds since epoch timestamp to a native object.
- count: int
- length: int
- start_timestamp: datetime.datetime
- class hutch.security.sumologic.models.SearchJobMessage(*, _raw: str = None, _sourcehost: str = None, _sourcename: str = None, _receipttime: datetime.datetime = None, _messagetime: datetime.datetime = None, _sourcecategory: str = None, **extra_data: Any)[source]
Bases:
pydantic.main.BaseModel
Maps message records returned by a search job into native data types.
- classmethod convert_usec_to_native(v)[source]
Converts a miliseconds since epoch timestamp to a native object.
- message_time: datetime.datetime
- raw: str
- receipt_time: datetime.datetime
- source_category: str
- source_host: str
- source_name: str