interface SiemAuditEvent {
    timestamp: string;
    event_type: string;
    actor_user_id: number | null;
    tenant_id: number | null;
    trace_id: string | null;
    action: string;
    subject_type: string;
    subject_id: number | null;
    ip_address: string | null;
    user_agent: string | null;
    checksum: string | null;
    payload: Record<string, unknown>;
}
declare function formatSiemAuditEvent(input: {
    action: string;
    subject_type: string;
    subject_id: number | null;
    user_id: number | null;
    tenant_id?: number | null;
    trace_id?: string | null;
    ip_address?: string | null;
    user_agent?: string | null;
    checksum?: string | null;
    payload?: Record<string, unknown>;
    created_at: Date;
}): SiemAuditEvent;
declare function formatCefLine(event: SiemAuditEvent): string;
export type { SiemAuditEvent };
export { formatCefLine, formatSiemAuditEvent };