import { z } from 'zod'; /** * Schema for executing raw Elasticsearch queries against available indexes. * Used when existing tools don't cover the specific query requirements. */ export declare const ElasticsearchQuerySchema: z.ZodObject<{ _source: z.ZodOptional>; query: z.ZodRecord; aggs: z.ZodOptional>; size: z.ZodOptional; from: z.ZodOptional; sort: z.ZodOptional>>; }, z.core.$strip>; export declare const ExecuteCustomQueryInputSchema: z.ZodObject<{ index: z.ZodEnum<{ tags: "tags"; _devices: "_devices"; device_status: "device_status"; installed_apps: "installed_apps"; win_event_log: "win_event_log"; builtin_appdx_errors: "builtin_appdx_errors"; power_events: "power_events"; mswin_logons: "mswin_logons"; app_focus: "app_focus"; url_domains: "url_domains"; url_hard_navigation: "url_hard_navigation"; builtin_appdx_navigation: "builtin_appdx_navigation"; url_errors: "url_errors"; groups: "groups"; }>; query: z.ZodObject<{ _source: z.ZodOptional>; query: z.ZodRecord; aggs: z.ZodOptional>; size: z.ZodOptional; from: z.ZodOptional; sort: z.ZodOptional>>; }, z.core.$strip>; }, z.core.$strip>; export declare const ExecuteCustomQueryOutputSchema: z.ZodObject<{ rows: z.ZodArray>; rows_available: z.ZodNumber; aggregations: z.ZodOptional>; }, z.core.$strip>; export type ElasticsearchQuery = z.infer; export type ExecuteCustomQueryInput = z.infer; export type ExecuteCustomQueryOutput = z.infer;