model

type AlertsStatus struct {
	NewCount int `json:"newCount"`
}

type Analyzer struct {
	Id   string `json:"id"`
	Path string `json:"path"`
}

type Artifact struct {
	Auditable
	CaseId       string   `json:"caseId"`
	GroupType    string   `json:"groupType"`
	GroupId      string   `json:"groupId"`
	ArtifactType string   `json:"artifactType"`
	Value        string   `json:"value"`
	MimeType     string   `json:"mimeType"`
	StreamLen    int      `json:"streamLength"`
	StreamId     string   `json:"streamId"`
	Tlp          string   `json:"tlp"`
	Tags         []string `json:"tags"`
	Description  string   `json:"description"`
	Ioc          bool     `json:"ioc"`
	Md5          string   `json:"md5"`
	Sha1         string   `json:"sha1"`
	Sha256       string   `json:"sha256"`
}

type ArtifactStream struct {
	Auditable
	Content string `json:"content"`
}

type Auditable struct {
	Id         string     `json:"id,omitempty"`
	CreateTime *time.Time `json:"createTime"`
	UpdateTime *time.Time `json:"updateTime,omitempty"`
	UserId     string     `json:"userId"`
	Kind       string     `json:"kind,omitempty"`
	Operation  string     `json:"operation,omitempty"`
}

type BaseSegment struct {
	// contains filtered or unexported fields
}

type Case struct {
	Auditable
	StartTime    *time.Time `json:"startTime"`
	CompleteTime *time.Time `json:"completeTime"`
	Title        string     `json:"title"`
	Description  string     `json:"description"`
	Priority     int        `json:"priority"`
	Severity     string     `json:"severity"`
	Status       string     `json:"status"`
	Template     string     `json:"template"`
	Tlp          string     `json:"tlp"`
	Pap          string     `json:"pap"`
	Category     string     `json:"category"`
	AssigneeId   string     `json:"assigneeId"`
	Tags         []string   `json:"tags"`
}

type Comment struct {
	Auditable
	CaseId      string `json:"caseId"`
	Description string `json:"description"`
}

type EventAckCriteria struct {
	SearchFilter    string                 `json:"searchFilter"`
	EventFilter     map[string]interface{} `json:"eventFilter"`
	DateRange       string                 `json:"dateRange"`
	DateRangeFormat string                 `json:"dateRangeFormat"`
	Timezone        string                 `json:"timezone"`
	Escalate        bool                   `json:"escalate"`
	Acknowledge     bool                   `json:"acknowledge"`
}

type EventIndexResults struct {
	Success    bool   `json:"success"`
	DocumentId string `json:"id"`
}

type EventMetric struct {
	Keys  []interface{} `json:"keys"`
	Value int           `json:"value"`
}

type EventRecord struct {
	Source    string `json:"source"`
	Time      time.Time
	Timestamp string                 `json:"timestamp"`
	Id        string                 `json:"id"`
	Type      string                 `json:"type"`
	Score     float64                `json:"score"`
	Payload   map[string]interface{} `json:"payload"`
}

type EventResults struct {
	CreateTime   time.Time `json:"createTime"`
	CompleteTime time.Time `json:"completeTime"`
	ElapsedMs    int       `json:"elapsedMs"`
	Errors       []string  `json:"errors"`
}

type EventSearchCriteria struct {
	RawQuery    string `json:"query"`
	DateRange   string `json:"dateRange"`
	MetricLimit int    `json:"metricLimit"`
	EventLimit  int    `json:"eventLimit"`
	BeginTime   time.Time
	EndTime     time.Time
	CreateTime  time.Time
	ParsedQuery *Query
	SortFields  []*SortCriteria
}

type EventSearchResults struct {
	EventResults
	Criteria    *EventSearchCriteria        `json:"criteria"`
	TotalEvents int                         `json:"totalEvents"`
	Events      []*EventRecord              `json:"events"`
	Metrics     map[string]([]*EventMetric) `json:"metrics"`
}

type EventUpdateCriteria struct {
	EventSearchCriteria
	UpdateScripts []string `json:"updateScripts"`
	Asynchronous  bool     `json:"async"`
}

type EventUpdateResults struct {
	EventResults
	Criteria       *EventUpdateCriteria `json:"criteria"`
	UpdatedCount   int                  `json:"updatedCount"`
	UnchangedCount int                  `json:"unchangedCount"`
}

type Filter struct {
	ImportId   string                 `json:"importId"`
	BeginTime  time.Time              `json:"beginTime"`
	EndTime    time.Time              `json:"endTime"`
	SrcIp      string                 `json:"srcIp"`
	SrcPort    int                    `json:"srcPort"`
	DstIp      string                 `json:"dstIp"`
	DstPort    int                    `json:"dstPort"`
	Parameters map[string]interface{} `json:"parameters"`
}

type GridStatus struct {
	TotalNodeCount     int `json:"totalNodeCount"`
	UnhealthyNodeCount int `json:"unhealthyNodeCount"`
	Eps                int `json:"eps"`
}

type GroupBySegment struct {
	*BaseSegment
}

type Info struct {
	Version        string                   `json:"version"`
	License        string                   `json:"license"`
	Parameters     *config.ClientParameters `json:"parameters"`
	ElasticVersion string                   `json:"elasticVersion"`
	WazuhVersion   string                   `json:"wazuhVersion"`
	UserId         string                   `json:"userId"`
	Timezones      []string                 `json:"timezones"`
}

type Job struct {
	Id             int          `json:"id"`
	CreateTime     time.Time    `json:"createTime"`
	Status         int          `json:"status"`
	CompleteTime   time.Time    `json:"completeTime"`
	FailTime       time.Time    `json:"failTime"`
	Failure        string       `json:"failure"`
	FailCount      int          `json:"failCount"`
	Owner          string       `json:"owner"`
	NodeId         string       `json:"nodeId"`
	LegacySensorId string       `json:"sensorId"`
	FileExtension  string       `json:"fileExtension"`
	Filter         *Filter      `json:"filter"`
	UserId         string       `json:"userId"`
	Kind           string       `json:"kind"`
	Results        []*JobResult `json:"results"`
}

type JobResult struct {
	Id      string      `json:"id"`
	Data    interface{} `json:"data"`
	Summary string      `json:"summary"`
}

type Node struct {
	Id               string    `json:"id"`
	OnlineTime       time.Time `json:"onlineTime"`
	UpdateTime       time.Time `json:"updateTime"`
	EpochTime        time.Time `json:"epochTime"`
	UptimeSeconds    int       `json:"uptimeSeconds"`
	Description      string    `json:"description"`
	Address          string    `json:"address"`
	Role             string    `json:"role"`
	Model            string    `json:"model"`
	ImageFront       string    `json:"imageFront"`
	ImageBack        string    `json:"imageBack"`
	Status           string    `json:"status"`
	Version          string    `json:"version"`
	ConnectionStatus string    `json:"connectionStatus"`
	RaidStatus       string    `json:"raidStatus"`
	ProcessStatus    string    `json:"processStatus"`
	ProductionEps    int       `json:"productionEps"`
	ConsumptionEps   int       `json:"consumptionEps"`
	FailedEvents     int       `json:"failedEvents"`
	MetricsEnabled   bool      `json:"metricsEnabled"`
}

type Packet struct {
	Number        int       `json:"number"`
	Type          string    `json:"type"`
	SrcMac        string    `json:"srcMac"`
	DstMac        string    `json:"dstMac"`
	SrcIp         string    `json:"srcIp"`
	SrcPort       int       `json:"srcPort"`
	DstIp         string    `json:"dstIp"`
	DstPort       int       `json:"dstPort"`
	Length        int       `json:"length"`
	Timestamp     time.Time `json:"timestamp"`
	Sequence      int       `json:"sequence"`
	Acknowledge   int       `json:"acknowledge"`
	Window        int       `json:"window"`
	Checksum      int       `json:"checksum"`
	Flags         []string  `json:"flags"`
	Payload       string    `json:"payload"`
	PayloadOffset int       `json:"payloadOffset"`
}

type Query struct {
	Segments []QuerySegment
}

type QuerySegment interface {
	String() string
	Kind() string
}

type QueryTerm struct {
	Raw     string
	Quoted  bool
	Quote   rune
	Grouped bool
}

type RelatedEvent struct {
	Auditable
	CaseId string                 `json:"caseId"`
	Fields map[string]interface{} `json:"fields"`
}

type SearchSegment struct {
	*BaseSegment
}

type SortBySegment struct {
	*BaseSegment
}

type SortCriteria struct {
	Field string
	Order string
}

type Status struct {
	Grid   *GridStatus   `json:"grid"`
	Alerts *AlertsStatus `json:"alerts"`
}

type Unauthorized struct {
	CreateTime time.Time
	Subject    string
	Operation  string
	Target     string
}

type User struct {
	Id             string    `json:"id"`
	CreateTime     time.Time `json:"createTime"`
	UpdateTime     time.Time `json:"updateTime"`
	Email          string    `json:"email"`
	FirstName      string    `json:"firstName"`
	LastName       string    `json:"lastName"`
	MfaStatus      string    `json:"mfaStatus"`
	Note           string    `json:"note"`
	Roles          []string  `json:"roles"`
	Status         string    `json:"status"`
	SearchUsername string    `json:"searchUsername"`
}