package workloadsiemcfg

const (
	//siem-configurations configmap data fields
	WorkloadSiemConfigDataFieldName = "configs"

	//siem-configurations configmap name and ns
	WorkloadSiemConfigMapName = "workload-siem"
	WorkloadSiemConfigMapNS   = "fluent-operator"
)

type SIEMClassification struct {
	HelmEdgeID string `json:"helm_edge_ID"`
	Pod        string `json:"pod"`
	Container  string `json:"container"`
	LogClass   string `json:"log_class"`
	LogType    string `json:"log_type"`
	Severity   string `json:"severity"`
	Pattern    string `json:"pattern"`
}

type Annotations struct {
	ClassificationsRaw string `yaml:"siem.edge.ncr.com/classifications"` // field to hold the raw JSON string
}

type Config struct {
	Annotations Annotations `yaml:"annotations"`
}