splunk-sdk/tests/data/inheritance_test_data.json

SDK for usage with the Splunk REST API

{
  "objects":[
    {
      "objectSearch":" | search (boris=hilda) | rename \"is_level_1\" AS \"level_0.is_level_1\", \"is_not_level_1\" AS \"level_0.is_not_level_1\" | rename \"level_0.is_level_1\" AS \"is_level_1\", \"level_0.is_not_level_1\" AS \"is_not_level_1\" | eval \"is_level_1\"=if(searchmatch(\" (natasha=meep) \"),1,0) | eval \"is_not_level_1\"=if(searchmatch(\"NOT( (natasha=meep) )\"),1,0) | rename \"is_level_1\" AS \"level_0.is_level_1\", \"is_not_level_1\" AS \"level_0.is_not_level_1\" | fields \"_time\", \"host\", \"source\", \"sourcetype\", \"level_0.is_level_1\", \"level_0.is_not_level_1\"",
      "constraints":[
        {
          "owner":"level_0",
          "search":"boris=hilda"
        }
      ],
      "lineage":"level_0",
      "objectName":"level_0",
      "displayName":"level 0",
      "autoextractSearch":" (boris=hilda) ",
      "calculations":[
        {
          "owner":"level_0",
          "calculationID":"5d76326e6a312efd4630317be0a7212cb99a9c14",
          "expression":"if(searchmatch(\" (natasha=meep) \"),1,0)",
          "editable":false,
          "calculationType":"Eval",
          "outputFields":[
            {
              "owner":"level_0",
              "type":"childCount",
              "hidden":false,
              "fieldSearch":"",
              "fieldName":"is_level_1",
              "displayName":"is_level_1",
              "editable":false,
              "comment":"",
              "required":false,
              "multivalue":false
            }
          ],
          "comment":""
        },
        {
          "owner":"level_0",
          "calculationID":"8c7a163a740a9c27dd2a99b70e45fa7bd1e3ee9b",
          "expression":"if(searchmatch(\"NOT( (natasha=meep) )\"),1,0)",
          "editable":false,
          "calculationType":"Eval",
          "outputFields":[
            {
              "owner":"level_0",
              "type":"childCount",
              "hidden":false,
              "fieldSearch":"",
              "fieldName":"is_not_level_1",
              "displayName":"is_not_level_1",
              "editable":false,
              "comment":"",
              "required":false,
              "multivalue":false
            }
          ],
          "comment":""
        }
      ],
      "previewSearch":" | search (boris=hilda) ",
      "objectSearchNoFields":" | search (boris=hilda) | rename \"is_level_1\" AS \"level_0.is_level_1\", \"is_not_level_1\" AS \"level_0.is_not_level_1\" | rename \"level_0.is_level_1\" AS \"is_level_1\", \"level_0.is_not_level_1\" AS \"is_not_level_1\" | eval \"is_level_1\"=if(searchmatch(\" (natasha=meep) \"),1,0) | eval \"is_not_level_1\"=if(searchmatch(\"NOT( (natasha=meep) )\"),1,0) | rename \"is_level_1\" AS \"level_0.is_level_1\", \"is_not_level_1\" AS \"level_0.is_not_level_1\"",
      "tsidxNamespace":"",
      "comment":"",
      "fields":[
        {
          "owner":"BaseEvent",
          "type":"timestamp",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"_time",
          "displayName":"_time",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"host",
          "displayName":"host",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"source",
          "displayName":"source",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"sourcetype",
          "displayName":"sourcetype",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"level_0",
          "type":"objectCount",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"level_0",
          "displayName":"level 0",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        }
      ],
      "parentName":"BaseEvent",
      "children":[
        "level_1"
      ]
    },
    {
      "objectSearch":" | search (boris=hilda) | rename \"is_level_2\" AS \"level_0.level_1.is_level_2\", \"is_not_level_2\" AS \"level_0.level_1.is_not_level_2\" | rename \"level_0.level_1.is_level_2\" AS \"is_level_2\", \"level_0.level_1.is_not_level_2\" AS \"is_not_level_2\" | search (natasha=meep) | eval \"is_level_2\"=if(searchmatch(\" (prr=4) \"),1,0) | eval \"is_not_level_2\"=if(searchmatch(\"NOT( (prr=4) )\"),1,0) | rename \"is_level_2\" AS \"level_0.level_1.is_level_2\", \"is_not_level_2\" AS \"level_0.level_1.is_not_level_2\" | fields \"_time\", \"host\", \"source\", \"sourcetype\", \"level_0.level_1.is_level_2\", \"level_0.level_1.is_not_level_2\"",
      "constraints":[
        {
          "owner":"level_0",
          "search":"boris=hilda"
        },
        {
          "owner":"level_0.level_1",
          "search":"natasha=meep"
        }
      ],
      "lineage":"level_0.level_1",
      "objectName":"level_1",
      "displayName":"level 1",
      "autoextractSearch":" (boris=hilda) ",
      "calculations":[
        {
          "owner":"level_0.level_1",
          "calculationID":"3077412e0686c92fe9f1bbf6ae58e8c6daf98cfd",
          "expression":"if(searchmatch(\" (prr=4) \"),1,0)",
          "editable":false,
          "calculationType":"Eval",
          "outputFields":[
            {
              "owner":"level_0.level_1",
              "type":"childCount",
              "hidden":false,
              "fieldSearch":"",
              "fieldName":"is_level_2",
              "displayName":"is_level_2",
              "editable":false,
              "comment":"",
              "required":false,
              "multivalue":false
            }
          ],
          "comment":""
        },
        {
          "owner":"level_0.level_1",
          "calculationID":"4a30d30bca031a36e4fde3de802c5b60f9efde95",
          "expression":"if(searchmatch(\"NOT( (prr=4) )\"),1,0)",
          "editable":false,
          "calculationType":"Eval",
          "outputFields":[
            {
              "owner":"level_0.level_1",
              "type":"childCount",
              "hidden":false,
              "fieldSearch":"",
              "fieldName":"is_not_level_2",
              "displayName":"is_not_level_2",
              "editable":false,
              "comment":"",
              "required":false,
              "multivalue":false
            }
          ],
          "comment":""
        }
      ],
      "previewSearch":" | search (boris=hilda) (natasha=meep) ",
      "objectSearchNoFields":" | search (boris=hilda) | rename \"is_level_2\" AS \"level_0.level_1.is_level_2\", \"is_not_level_2\" AS \"level_0.level_1.is_not_level_2\" | rename \"level_0.level_1.is_level_2\" AS \"is_level_2\", \"level_0.level_1.is_not_level_2\" AS \"is_not_level_2\" | search (natasha=meep) | eval \"is_level_2\"=if(searchmatch(\" (prr=4) \"),1,0) | eval \"is_not_level_2\"=if(searchmatch(\"NOT( (prr=4) )\"),1,0) | rename \"is_level_2\" AS \"level_0.level_1.is_level_2\", \"is_not_level_2\" AS \"level_0.level_1.is_not_level_2\"",
      "tsidxNamespace":"",
      "comment":"",
      "fields":[
        {
          "owner":"BaseEvent",
          "type":"timestamp",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"_time",
          "displayName":"_time",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"host",
          "displayName":"host",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"source",
          "displayName":"source",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"sourcetype",
          "displayName":"sourcetype",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"level_0.level_1",
          "type":"objectCount",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"level_1",
          "displayName":"level 1",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        }
      ],
      "parentName":"level_0",
      "children":[
        "level_2"
      ]
    },
    {
      "objectSearch":" | search (boris=hilda) (natasha=meep) (prr=4) | fields \"_time\", \"host\", \"source\", \"sourcetype\"",
      "constraints":[
        {
          "owner":"level_0",
          "search":"boris=hilda"
        },
        {
          "owner":"level_0.level_1",
          "search":"natasha=meep"
        },
        {
          "owner":"level_0.level_1.level_2",
          "search":"prr=4"
        }
      ],
      "lineage":"level_0.level_1.level_2",
      "objectName":"level_2",
      "displayName":"level 2",
      "autoextractSearch":" (boris=hilda) ",
      "calculations":[

      ],
      "previewSearch":" | search (boris=hilda) (natasha=meep) (prr=4) ",
      "objectSearchNoFields":" | search (boris=hilda) (natasha=meep) (prr=4) ",
      "tsidxNamespace":"",
      "comment":"",
      "fields":[
        {
          "owner":"BaseEvent",
          "type":"timestamp",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"_time",
          "displayName":"_time",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"host",
          "displayName":"host",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"source",
          "displayName":"source",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"BaseEvent",
          "type":"string",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"sourcetype",
          "displayName":"sourcetype",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        },
        {
          "owner":"level_0.level_1.level_2",
          "type":"objectCount",
          "hidden":false,
          "fieldSearch":"",
          "fieldName":"level_2",
          "displayName":"level 2",
          "editable":false,
          "comment":"",
          "required":false,
          "multivalue":false
        }
      ],
      "parentName":"level_1",
      "children":[

      ]
    }
  ],
  "displayName":"inheritance test",
  "objectSummary":{
    "Event-Based":3,
    "Search-Based":0,
    "Transaction-Based":0,
    "Interfaces":0,
    "Interface Implementations":0
  },
  "modelName":"inheritance_test",
  "description":"Data model description to test lineages.",
  "objectNameList":[
    "level_0",
    "level_1",
    "level_2"
  ]
}