Splunk · JSON-LD Context
Splunk Context
JSON-LD context defining the semantic vocabulary for Splunk from Splunk.
0 Classes
15 Properties
8 Namespaces
Namespaces
splunk:
https://dev.splunk.com/enterprise/reference#
splunkrest:
https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/
xsd:
http://www.w3.org/2001/XMLSchema#
dcterms:
http://purl.org/dc/terms/
hydra:
http://www.w3.org/ns/hydra/core#
spdx:
http://spdx.org/rdf/terms#
ssn:
http://www.w3.org/ns/ssn/
sosa:
http://www.w3.org/ns/sosa/
Properties
| Property | Type | Container |
|---|---|---|
| SearchJob | ||
| Event | ||
| Index | ||
| DataInput | ||
| MonitorInput | ||
| HecToken | ||
| SearchResults | ||
| owner | string | |
| app | string | |
| sharing | string | |
| description | string | |
| name | string | |
| id | reference | |
| created | dateTime | |
| modified | dateTime |
JSON-LD Document
{
"@context": {
"@version": 1.1,
"@vocab": "https://schema.org/",
"splunk": "https://dev.splunk.com/enterprise/reference#",
"splunkrest": "https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/",
"xsd": "http://www.w3.org/2001/XMLSchema#",
"dcterms": "http://purl.org/dc/terms/",
"hydra": "http://www.w3.org/ns/hydra/core#",
"spdx": "http://spdx.org/rdf/terms#",
"ssn": "http://www.w3.org/ns/ssn/",
"sosa": "http://www.w3.org/ns/sosa/",
"SearchJob": {
"@id": "splunk:SearchJob",
"@context": {
"sid": {
"@id": "splunk:searchId",
"@type": "xsd:string"
},
"search": {
"@id": "splunk:searchQuery",
"@type": "xsd:string"
},
"dispatchState": {
"@id": "splunk:dispatchState",
"@type": "xsd:string"
},
"doneProgress": {
"@id": "splunk:doneProgress",
"@type": "xsd:decimal"
},
"scanCount": {
"@id": "splunk:scanCount",
"@type": "xsd:integer"
},
"eventCount": {
"@id": "splunk:eventCount",
"@type": "xsd:integer"
},
"resultCount": {
"@id": "splunk:resultCount",
"@type": "xsd:integer"
},
"runDuration": {
"@id": "splunk:runDuration",
"@type": "xsd:decimal"
},
"earliestTime": {
"@id": "splunk:earliestTime",
"@type": "xsd:dateTime"
},
"latestTime": {
"@id": "splunk:latestTime",
"@type": "xsd:dateTime"
},
"cursorTime": {
"@id": "splunk:cursorTime",
"@type": "xsd:dateTime"
},
"isDone": {
"@id": "splunk:isDone",
"@type": "xsd:boolean"
},
"isFailed": {
"@id": "splunk:isFailed",
"@type": "xsd:boolean"
},
"isPaused": {
"@id": "splunk:isPaused",
"@type": "xsd:boolean"
},
"isFinalized": {
"@id": "splunk:isFinalized",
"@type": "xsd:boolean"
},
"isSaved": {
"@id": "splunk:isSaved",
"@type": "xsd:boolean"
},
"isRealTimeSearch": {
"@id": "splunk:isRealTimeSearch",
"@type": "xsd:boolean"
},
"ttl": {
"@id": "splunk:timeToLive",
"@type": "xsd:integer"
},
"priority": {
"@id": "splunk:priority",
"@type": "xsd:integer"
},
"author": {
"@id": "dcterms:creator",
"@type": "xsd:string"
},
"published": {
"@id": "dcterms:created",
"@type": "xsd:dateTime"
},
"updated": {
"@id": "dcterms:modified",
"@type": "xsd:dateTime"
}
}
},
"Event": {
"@id": "splunk:Event",
"@context": {
"time": {
"@id": "splunk:eventTime",
"@type": "xsd:decimal"
},
"_time": {
"@id": "splunk:indexedTime",
"@type": "xsd:dateTime"
},
"_raw": {
"@id": "splunk:rawEvent",
"@type": "xsd:string"
},
"event": {
"@id": "splunk:eventPayload"
},
"host": {
"@id": "splunk:host",
"@type": "xsd:string"
},
"source": {
"@id": "splunk:source",
"@type": "xsd:string"
},
"sourcetype": {
"@id": "splunk:sourcetype",
"@type": "xsd:string"
},
"index": {
"@id": "splunk:index",
"@type": "xsd:string"
},
"_indextime": {
"@id": "splunk:indexTime",
"@type": "xsd:string"
},
"linecount": {
"@id": "splunk:lineCount",
"@type": "xsd:integer"
},
"splunk_server": {
"@id": "splunk:splunkServer",
"@type": "xsd:string"
},
"eventtype": {
"@id": "splunk:eventType",
"@type": "xsd:string"
},
"tag": {
"@id": "splunk:tag",
"@container": "@set"
},
"fields": {
"@id": "splunk:metadataFields"
}
}
},
"Index": {
"@id": "splunk:Index",
"@context": {
"name": {
"@id": "dcterms:title",
"@type": "xsd:string"
},
"datatype": {
"@id": "splunk:datatype",
"@type": "xsd:string"
},
"totalEventCount": {
"@id": "splunk:totalEventCount",
"@type": "xsd:integer"
},
"currentDBSizeMB": {
"@id": "splunk:currentDBSizeMB",
"@type": "xsd:integer"
},
"maxTotalDataSizeMB": {
"@id": "splunk:maxTotalDataSizeMB",
"@type": "xsd:integer"
},
"frozenTimePeriodInSecs": {
"@id": "splunk:frozenTimePeriodInSecs",
"@type": "xsd:integer"
},
"homePath": {
"@id": "splunk:homePath",
"@type": "xsd:string"
},
"coldPath": {
"@id": "splunk:coldPath",
"@type": "xsd:string"
},
"thawedPath": {
"@id": "splunk:thawedPath",
"@type": "xsd:string"
},
"disabled": {
"@id": "splunk:disabled",
"@type": "xsd:boolean"
},
"isInternal": {
"@id": "splunk:isInternal",
"@type": "xsd:boolean"
},
"minTime": {
"@id": "splunk:minTime",
"@type": "xsd:dateTime"
},
"maxTime": {
"@id": "splunk:maxTime",
"@type": "xsd:dateTime"
}
}
},
"DataInput": {
"@id": "splunk:DataInput",
"@context": {
"inputType": {
"@id": "splunk:inputType",
"@type": "xsd:string"
},
"disabled": {
"@id": "splunk:disabled",
"@type": "xsd:boolean"
},
"index": {
"@id": "splunk:index",
"@type": "xsd:string"
},
"sourcetype": {
"@id": "splunk:sourcetype",
"@type": "xsd:string"
},
"host": {
"@id": "splunk:host",
"@type": "xsd:string"
}
}
},
"MonitorInput": {
"@id": "splunk:MonitorInput",
"@context": {
"path": {
"@id": "splunk:monitorPath",
"@type": "xsd:string"
},
"recursive": {
"@id": "splunk:recursive",
"@type": "xsd:boolean"
},
"followTail": {
"@id": "splunk:followTail",
"@type": "xsd:boolean"
},
"whitelist": {
"@id": "splunk:whitelist",
"@type": "xsd:string"
},
"blacklist": {
"@id": "splunk:blacklist",
"@type": "xsd:string"
}
}
},
"HecToken": {
"@id": "splunk:HecToken",
"@context": {
"token": {
"@id": "splunk:tokenValue",
"@type": "xsd:string"
},
"name": {
"@id": "dcterms:title",
"@type": "xsd:string"
},
"useACK": {
"@id": "splunk:useACK",
"@type": "xsd:boolean"
},
"indexes": {
"@id": "splunk:allowedIndexes",
"@container": "@set"
}
}
},
"SearchResults": {
"@id": "splunk:SearchResults",
"@context": {
"init_offset": {
"@id": "splunk:initOffset",
"@type": "xsd:integer"
},
"results": {
"@id": "splunk:resultEntries",
"@container": "@list"
},
"preview": {
"@id": "splunk:isPreview",
"@type": "xsd:boolean"
}
}
},
"owner": {
"@id": "dcterms:creator",
"@type": "xsd:string"
},
"app": {
"@id": "splunk:appContext",
"@type": "xsd:string"
},
"sharing": {
"@id": "splunk:sharingLevel",
"@type": "xsd:string"
},
"description": {
"@id": "dcterms:description",
"@type": "xsd:string"
},
"name": {
"@id": "dcterms:title",
"@type": "xsd:string"
},
"id": {
"@id": "@id",
"@type": "@id"
},
"created": {
"@id": "dcterms:created",
"@type": "xsd:dateTime"
},
"modified": {
"@id": "dcterms:modified",
"@type": "xsd:dateTime"
}
}
}