/** * Splunk Node - Version 2 * Discriminator: resource=search, operation=getResult */ interface Credentials { splunkApi: CredentialReference; } /** Get the result of a search job */ export type SplunkV2SearchGetResultParams = { resource: 'search'; operation: 'getResult'; /** * Search Job * @default {"mode":"list","value":""} */ searchJobId?: { __rl: true; mode: 'list' | 'id'; value: string; cachedResultName?: string }; /** * Whether to return all results or only up to a given limit * @default false */ returnAll?: boolean | Expression; /** * Max number of results to return * @displayOptions.show { returnAll: [false] } * @default 50 */ limit?: number | Expression; /** * Filters * @default {} */ filters?: { /** Key-value pair to match against. Example: if "Key" is set to <code>user</code> and "Field" is set to <code>john</code>, only the results where <code>user</code> is <code>john</code> will be returned. * @default {} */ keyValueMatch?: { /** Key-Value Pair */ keyValuePair?: { /** Key to match against */ key?: string | Expression | PlaceholderValue; /** Value to match against */ value?: string | Expression | PlaceholderValue; }; }; }; /** * Options * @default {} */ options?: { /** Whether to include field summary statistics in the response * @default false */ add_summary_to_metadata?: boolean | Expression; }; }; export type SplunkV2SearchGetResultOutput = { fields?: Array<{ name?: string; }>; init_offset?: number; messages?: Array<{ text?: string; type?: string; }>; preview?: boolean; results?: Array<{ _time?: string; app?: string; attack?: string; dest_ip?: string; dest_port?: string; file_name?: string; file_path?: string; http_user_agent?: string; httpmethod?: string; ids_type?: string; src_ip?: string; src_port?: string; srccountry?: string; timestamp?: string; transport?: string; }>; }; export type SplunkV2SearchGetResultNode = { type: 'n8n-nodes-base.splunk'; version: 2; credentials?: Credentials; config: NodeConfig; output?: Items; };