splunk-sdk
Version:
SDK for usage with the Splunk REST API
194 lines • 4.84 kB
JSON
[
{
"fieldName": "action",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": true,
"displayName": "action",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "info",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": true,
"displayName": "info",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "object",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "object",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "operation",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "operation",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "path",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "path",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "user",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": true,
"displayName": "user",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "exec_time",
"owner": "Audit",
"type": "number",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "execution time",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "result_count",
"owner": "Audit",
"type": "number",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "result count",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "savedsearch_name",
"owner": "Audit",
"type": "string",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "savedsearch name",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "scan_count",
"owner": "Audit",
"type": "number",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "scan count",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "total_run_time",
"owner": "Audit",
"type": "number",
"required": false,
"multivalue": false,
"hidden": true,
"editable": true,
"displayName": "total run time",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "_time",
"owner": "BaseEvent",
"type": "timestamp",
"required": false,
"multivalue": false,
"hidden": false,
"editable": false,
"displayName": "_time",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "host",
"owner": "BaseEvent",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": false,
"displayName": "host",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "source",
"owner": "BaseEvent",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": false,
"displayName": "source",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "sourcetype",
"owner": "BaseEvent",
"type": "string",
"required": false,
"multivalue": false,
"hidden": false,
"editable": false,
"displayName": "sourcetype",
"comment": "",
"fieldSearch": ""
},
{
"fieldName": "Audit",
"owner": "Audit",
"type": "objectCount",
"required": false,
"multivalue": false,
"hidden": false,
"editable": false,
"displayName": "Audit",
"comment": "",
"fieldSearch": ""
}
]