# Author::        Christopher Brito (cbrito@gmail.com)
# Original Repo:: https://github.com/cbrito/splunk-client

require 'net/https'
require 'cgi'
require 'rubygems'
require 'nokogiri'

class SplunkJob
  attr_reader :jobId
  
  def initialize(jobId, clientPointer)
      @jobId  = jobId
      @client = clientPointer #SplunkClient object pointer
  end

  def wait
    wait_for_results
  end
  
  def wait_for_results
    # Wait for the Splunk search to complete
  	while (@client.get_search_status(@jobId).to_i == 0)
  	  sleep 2
  	end
  end
  
  def complete?
    # Return status of job
    @client.get_search_status(@jobId).to_i == 0
  end
  
  def results(maxResults=0)
    # Return search results
    @client.get_search_results(@jobId, maxResults)
  end
  
end #class SplunkJob

class SplunkClient
  
  def initialize(username, password, host, port=8089)
    @USER=username; @PASS=password; @HOST=host; @PORT=port
    
    @SESSION_KEY = { 'authorization' => "Splunk #{get_session_key}" }
  end
  
  def create_search(search)
    # Returns a SplunkJob 
    xml = splunk_post_request("/services/search/jobs",
                              "search=#{CGI::escape("search #{search}")}",
                              @SESSION_KEY)

    @doc = Nokogiri::Slop(xml)
    
    return SplunkJob.new(@doc.xpath("//sid").text, self)
  end

  def get_search_status(sid)
    xml = splunk_get_request("/services/search/jobs/#{sid}")
    @doc = Nokogiri::Slop(xml)
    return @doc.xpath("//s:key[@name='isDone']").text
  end

  def get_search_results(sid, maxResults=0)
    splunk_get_request("/services/search/jobs/#{sid}/results?count=#{maxResults}")
  end
  
  private ###############################################################################
  
  def splunk_http_request
    http = Net::HTTP.new(@HOST, @PORT)
    http.use_ssl = true
    http.verify_mode = OpenSSL::SSL::VERIFY_NONE
    return http
  end
  
  def splunk_get_request(path)
    splunk_http_request.get(path, @SESSION_KEY).body
  end
  
  def splunk_post_request(path, data=nil, headers=nil)
    splunk_http_request.post(path,data,headers).body
  end

  def get_session_key
    xml = splunk_post_request("/services/auth/login",
                              "username=#{@USER}&password=#{@PASS}")
    @doc = Nokogiri::Slop(xml)
    return @doc.xpath("//sessionKey").text
  end
  
end #class SplunkClient