/**
 * Microsoft Sentinel Client
 *
 * Log Analytics Data Collector API client for Microsoft Sentinel integration.
 *
 * @module integrations/siem/sentinel
 */
import type { SIEMClient, SIEMEvent, SIEMTestResult, SIEMSendResult, SIEMBatchResult, SentinelConfig } from "./types.js";
/**
 * Microsoft Sentinel (Log Analytics) client
 */
export declare class SentinelClient implements SIEMClient {
    readonly provider: "sentinel";
    private config;
    private workspaceId;
    private sharedKey;
    private logType;
    constructor(config: SentinelConfig);
    /**
     * Build authorization signature for Log Analytics API
     */
    private buildSignature;
    /**
     * Get RFC1123 formatted date
     */
    private getRfc1123Date;
    /**
     * Test connection to Sentinel
     */
    testConnection(): Promise<SIEMTestResult>;
    /**
     * Send a single event to Sentinel
     */
    sendEvent(event: SIEMEvent): Promise<SIEMSendResult>;
    /**
     * Send multiple events in batch
     */
    sendEvents(events: SIEMEvent[]): Promise<SIEMBatchResult>;
    /**
     * Close connection
     */
    close(): Promise<void>;
}
/**
 * Create a Sentinel client from configuration
 */
export declare function createSentinelClient(config: {
    workspaceId: string;
    sharedKey: string;
    logType?: string;
    timeGeneratedField?: string;
}): SentinelClient;
//# sourceMappingURL=sentinel.d.ts.map