def _record(serial_number,
time_stamp,
host,
attributes,
attribute_names,
encoder,
condensed=False):
if condensed is False:
raw = encoder.encode(attributes)
# Formulate record
fields = dict()
for f in attribute_names:
if f in attributes:
fields[f] = attributes[f]
if serial_number > 0:
fields['_serial'] = serial_number
fields['_time'] = time_stamp
if condensed is False:
fields['_raw'] = raw
fields['host'] = host
return fields
if condensed is False:
record = OrderedDict(
chain((('_serial', serial_number), ('_time', time_stamp),
('_raw', raw), ('host', host)),
map(lambda name: (name, fields.get(name, '')),
attribute_names)))
else:
record = OrderedDict(
chain((('_serial', serial_number), ('_time', time_stamp),
('host', host)),
map(lambda name: (name, fields.get(name, '')),
attribute_names)))
return record
# Copyright 2011-2015 Splunk, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"): you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. """Python library for Splunk.""" from __future__ import absolute_import from splunklib.six.moves import map __version_info__ = (1, 6, 14) __version__ = ".".join(map(str, __version_info__))
# Copyright 2011-2015 Splunk, Inc. # # Licensed under the Apache License, Version 2.0 (the "License"): you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. """Python library for Splunk.""" from __future__ import absolute_import from splunklib.six.moves import map __version_info__ = (1, 6, 4) __version__ = ".".join(map(str, __version_info__))
