models module

Provides SumoLogic related models for data mapping.

class hutch.security.sumologic.models.SearchJob(*, id: str, state: str, recordCount: int = None, messageCount: int = None, pendingErrors: List[str] = None, pendingWarnings: List[str] = None, histogramBuckets: List[hutch.security.sumologic.models.SearchJobHistogramBucket] = None, **extra_data: Any)[source]

Bases: pydantic.main.BaseModel

Maps a search job into native data types.

histogram_buckets: List[hutch.security.sumologic.models.SearchJobHistogramBucket]
id: str
message_count: int
pending_errors: List[str]
pending_warnings: List[str]
record_count: int
state: str
class hutch.security.sumologic.models.SearchJobField(*, name: str, keyField: bool = None, fieldType: str = None)[source]

Bases: pydantic.main.BaseModel

Maps message ‘fields’ returned by a search job into native data types.

field_type: str
key_field: bool
name: str
class hutch.security.sumologic.models.SearchJobHistogramBucket(*, length: int, count: int, startTimestamp: datetime.datetime = None, **extra_data: Any)[source]

Bases: pydantic.main.BaseModel

Maps a search job’s ‘histogram bucket’ entries into native data types.

classmethod convert_usec_to_native(v)[source]

Converts a miliseconds since epoch timestamp to a native object.

count: int
length: int
start_timestamp: datetime.datetime
class hutch.security.sumologic.models.SearchJobMessage(*, _raw: str = None, _sourcehost: str = None, _sourcename: str = None, _receipttime: datetime.datetime = None, _messagetime: datetime.datetime = None, _sourcecategory: str = None, **extra_data: Any)[source]

Bases: pydantic.main.BaseModel

Maps message records returned by a search job into native data types.

classmethod convert_usec_to_native(v)[source]

Converts a miliseconds since epoch timestamp to a native object.

message_time: datetime.datetime
raw: str
receipt_time: datetime.datetime
source_category: str
source_host: str
source_name: str
class hutch.security.sumologic.models.SearchJobRecord(**extra_data: Any)[source]

Bases: pydantic.main.BaseModel

Maps records returned by a search job into native data types.