/**
 * Builds a time range filter for an Elasticsearch query
 *
 * @param timeRange - Time range string (e.g. "24h", "7d")
 * @param field - The timestamp field name (default: "@timestamp")
 * @returns Elasticsearch range filter object
 */
export declare function buildTimeRangeFilter(timeRange: string, field?: string): Record<string, unknown>;
/**
 * Builds a before/after time range comparison query
 *
 * @param timeRange - Time range string (e.g. "7d")
 * @param field - The timestamp field name (default: "@timestamp")
 * @returns Object with before and after period filters
 */
export declare function buildComparisonRangeFilters(timeRange: string, field?: string): {
    beforeFilter: Record<string, unknown>;
    afterFilter: Record<string, unknown>;
};
/**
 * Builds a base query with optional text query
 *
 * @param timeRange - Time range string (e.g. "24h", "7d")
 * @param query - Optional text query
 * @param field - The timestamp field name (default: "@timestamp")
 * @returns Elasticsearch query object
 */
export declare function buildBaseQuery(timeRange: string, query?: string, field?: string): Record<string, unknown>;
/**
 * Builds a multi-value term query that tries multiple case variations
 *
 * @param field - Field name to search
 * @param value - Value or values to search for
 * @returns Elasticsearch bool query with multiple term options
 */
export declare function buildMultiCaseTermsQuery(field: string, value: string | string[]): Record<string, unknown>;