o gZhP"@s@ddlZddlmZddlmZddlmZGdddeZdS)N)ObjectApiResponse)NamespacedClient)_rewrite_parametersc#@seZdZeddddddddddddddddddejejdejedejedejedeje d ejed ejed eje d eje d eje dejedeje dejej ddefdejedejede ejf ddZ dS)TextStructureClient text_files)Z body_nameN)charset column_names delimiterexplainformat grok_patternhas_header_rowline_merge_size_limitlines_to_samplequoteshould_trim_fieldstimeouttimestamp_fieldtimestamp_formatrr r r r r rrrrrrz t.Literal[-1]z t.Literal[0]rrreturncCs|durtdd}i}|dur||d<|dur||d<|dur$||d<|dur,||d<|dur4||d<|dur<||d <|durD||d <| durL| |d <| durT| |d <| dur\| |d <| durd| |d<| durl| |d<|durt||d<|dur|||d<|}ddd}|jd||||dS)uG Finds the structure of a text file. The text file must contain data that is suitable to be ingested into Elasticsearch. ``_ :param text_files: :param charset: The text’s character set. It must be a character set that is supported by the JVM that Elasticsearch uses. For example, UTF-8, UTF-16LE, windows-1252, or EUC-JP. If this parameter is not specified, the structure finder chooses an appropriate character set. :param column_names: If you have set format to delimited, you can specify the column names in a comma-separated list. If this parameter is not specified, the structure finder uses the column names from the header row of the text. If the text does not have a header role, columns are named "column1", "column2", "column3", etc. :param delimiter: If you have set format to delimited, you can specify the character used to delimit the values in each row. Only a single character is supported; the delimiter cannot have multiple characters. By default, the API considers the following possibilities: comma, tab, semi-colon, and pipe (|). In this default scenario, all rows must have the same number of fields for the delimited format to be detected. If you specify a delimiter, up to 10% of the rows can have a different number of columns than the first row. :param explain: If this parameter is set to true, the response includes a field named explanation, which is an array of strings that indicate how the structure finder produced its result. :param format: The high level structure of the text. Valid values are ndjson, xml, delimited, and semi_structured_text. By default, the API chooses the format. In this default scenario, all rows must have the same number of fields for a delimited format to be detected. If the format is set to delimited and the delimiter is not set, however, the API tolerates up to 5% of rows that have a different number of columns than the first row. :param grok_pattern: If you have set format to semi_structured_text, you can specify a Grok pattern that is used to extract fields from every message in the text. The name of the timestamp field in the Grok pattern must match what is specified in the timestamp_field parameter. If that parameter is not specified, the name of the timestamp field in the Grok pattern must match "timestamp". If grok_pattern is not specified, the structure finder creates a Grok pattern. :param has_header_row: If you have set format to delimited, you can use this parameter to indicate whether the column names are in the first row of the text. If this parameter is not specified, the structure finder guesses based on the similarity of the first row of the text to other rows. :param line_merge_size_limit: The maximum number of characters in a message when lines are merged to form messages while analyzing semi-structured text. If you have extremely long messages you may need to increase this, but be aware that this may lead to very long processing times if the way to group lines into messages is misdetected. :param lines_to_sample: The number of lines to include in the structural analysis, starting from the beginning of the text. The minimum is 2; If the value of this parameter is greater than the number of lines in the text, the analysis proceeds (as long as there are at least two lines in the text) for all of the lines. :param quote: If you have set format to delimited, you can specify the character used to quote the values in each row if they contain newlines or the delimiter character. Only a single character is supported. If this parameter is not specified, the default value is a double quote ("). If your delimited text format does not use quoting, a workaround is to set this argument to a character that does not appear anywhere in the sample. :param should_trim_fields: If you have set format to delimited, you can specify whether values between delimiters should have whitespace trimmed from them. If this parameter is not specified and the delimiter is pipe (|), the default value is true. Otherwise, the default value is false. :param timeout: Sets the maximum amount of time that the structure analysis make take. If the analysis is still running when the timeout expires then it will be aborted. :param timestamp_field: Optional parameter to specify the timestamp field in the file :param timestamp_format: The Java time format of the timestamp field in the text. Nz-Empty value passed for parameter 'text_files'z/_text_structure/find_structurerr r r r r rrrrrrrrzapplication/jsonzapplication/x-ndjson)acceptz content-typePOST)paramsheadersbody) ValueErrorZperform_request)selfrrr r r r r rrrrrrrrZ_TextStructureClient__pathZ_TextStructureClient__queryZ_TextStructureClient__bodyZ_TextStructureClient__headersr`/var/www/html/lang_env/lib/python3.10/site-packages/elasticsearch/_sync/client/text_structure.pyfind_structuresN\ z"TextStructureClient.find_structure)__name__ __module__ __qualname__rtSequenceAnyOptionalstrboolintUnionrr rrrrrsf      r) typingr$Zelastic_transportr_baserutilsrrrrrrs