index.js

var splunkjs = require('splunk-sdk');
var config = require('config');
var handlebars = require('handlebars');
var util = require("util");

var splunkConfig = config.get('splunk');
// console.log("Loaded conf", process.env.NODE_ENV);
 
var service = new splunkjs.Service(splunkConfig);
// console.log("Splunk service", service);

// simply applies 
var apply = function (template, parms) {
	var compiled = handlebars.compile(template);
	var result = compiled(parms);
	return result;
}

// Default search parameters
var searchParams = {
	exec_mode: "normal",
	output_mode:"json",
	earliest_time: "@m-10m",
	latest_time: "@m"
};
var params = function (newParams) {
	searchParams = Object.assign(searchParams, newParams);
	return this;
}
var exec_mode = function (exec_mode) {
	searchParams.exec_mode = exec_mode
	return this;
}
var output_mode = function (output_mode) {
	searchParams.output_mode = output_mode
	return this;
}
var earliest_time = function (earliest_time) {
	searchParams.earliest_time = earliest_time
	return this;
}
var latest_time = function (latest_time) {
	searchParams.latest_time = latest_time
	return this;
}

// Allows easy setting of namespace
var namespace = {
	owner: "-",
	app: "-",
	sharing: "global"
}
var namespace = function (newnamespace) {
	namespace = Object.assign(namespace, newnamespace);
	return this;
}
var owner = function (owner) {
	namespace.owner = owner;
	return this;
}
var app = function (app) {
	namespace.app = app;
	return this;
}
var sharing = function (sharing) {
	namespace.sharing = sharing;
	return this;
}

// given a result object, returns a more usable json
// (probably not great for large results)
function mapToJson (results) {

	var newResults = [];

	var fields = results.fields;
	var rows = results.rows;

	for(var i = 0; rows && i < rows.length; i++) {
		var values = rows[i];
		var newRow = {};

		for(var j = 0; j < values.length; j++) {
			var field = fields[j];
			var value = values[j];
			newRow[field] = value;
		}

		newResults.push(newRow);
	}

	return newResults;
}

// run search, poll job, return results
var search = function (query, p) {

	if (p) params(p);
	
	var promise = new Promise(function (resolve, reject) {

		service.search( query, searchParams, namespace, function(err, job) {

			// error scenarios
			if (err) return reject(err);
			if (job === undefined) return reject('Unable to create job');
			
			// Poll the status of the search job
			job.track({period: 200}, {
				done: function(job) {
					
					// Get the results and return
					job.results({}, function(err,results,job){
						
						// error
						if (err) return reject(err);
						
						// success
						return resolve({job:job,results: mapToJson(results)});
					});
				},
				failed: function(job) {
					return reject('failed');
				},
				error: function(err) {
					return reject(err);
				}
			});

		});
	});

	return promise;
};

var exports = module.exports = {
	service: service,
	apply: apply,
	search: search,
	toJson: mapToJson,
	owner: owner,
	app: app,
	sharing: sharing,
	params: params,
	exec_mode: exec_mode,
	output_mode: output_mode,
	earliest_time: earliest_time,
	latest_time: latest_time,
	namespace: namespace
};