U Ec_@s,ddlmZmZmZmZGdddeZdS))NamespacedClient SKIP_IN_PATH query_params _make_pathc@sFeZdZedddd ddZed ddZeddd d d ZdS) EqlClient keep_aliveZkeep_on_completionZwait_for_completion_timeoutNcCs<||fD]}|tkrtdq|jjdt|dd|||dS)a3 Returns results matching a query expressed in Event Query Language (EQL) ``_ :arg index: The name of the index to scope the operation :arg body: Eql request body. Use the `query` to limit the query scope. :arg keep_alive: Update the time interval in which the results (partial or final) for this search will be available Default: 5d :arg keep_on_completion: Control whether the response should be stored in the cluster if it completed within the provided [wait_for_completion] time (default: false) :arg wait_for_completion_timeout: Specify the time that the request should block waiting for the final response z+Empty value passed for a required argument.POST_eqlsearch)paramsheadersbodyr ValueError transportZperform_requestr)selfindexr r r paramr?/tmp/pip-target-m1bursmm/lib/python/elasticsearch/client/eql.pyr s   zEqlClient.searchcCs,|tkrtd|jjdtdd|||dS)a6 Deletes an async EQL search by ID. If the search is still running, the search request will be cancelled. Otherwise, the saved search results are deleted. ``_ :arg id: The async search ID 0Empty value passed for a required argument 'id'.DELETEr r r r rridr r rrrdelete3s  zEqlClient.deletecCs,|tkrtd|jjdtdd|||dS)a Returns async results from previously executed Event Query Language (EQL) search ``_ :arg id: The async search ID :arg keep_alive: Update the time interval in which the results (partial or final) for this search will be available Default: 5d :arg wait_for_completion_timeout: Specify the time that the request should block waiting for the final response rGETr r rrrrrrgetCs  z EqlClient.get)NN)NN)NN)__name__ __module__ __qualname__rr rrrrrrrs    rN)utilsrrrrrrrrrs