executor.execute(() -> {
            try {
                final Object eventType = dataMap.remove(getParamValue(localParams, "field.event_type", "event_type"));
                if (getParamValue(localParams, "event.create", "create").equals(eventType)
                        || getParamValue(localParams, "event.modify", "modify").equals(eventType)) {
                    // updated file
                    addDocument(localParams, dataMap);

        final Map<String, Object> source = toLowerHyphen(searchLogEvent.toSource());
        source.put("_id", searchLogEvent.getId());
        // source.put("version_no", searchLogEvent.getVersionNo());
        source.put("event_type", searchLogEvent.getEventType());
        return source;
    }

    /**
     * Converts a map to lower hyphen case.
     *
     * @param source The source map.
     * @return The converted map.

     *
     * @return the event type
     */
    public WitnessEventType getEventType() {
        return eventType;
    }

    /**
     * Sets the event type.
     *
     * @param eventType the event type
     */
    public void setEventType(WitnessEventType eventType) {
        this.eventType = eventType;
    }

    /**
     * Gets the resource name.
     *
     * @return the resource name

        Map<EventType, Long> stats = logger.getStatistics();
        assertEquals(Long.valueOf(1), stats.get(EventType.AUTHENTICATION_SUCCESS), "Should have 1 authentication success event");
        assertEquals(Long.valueOf(1), stats.get(EventType.AUTHENTICATION_FAILURE), "Should have 1 authentication failure event");
        assertEquals(Long.valueOf(1), stats.get(EventType.FILE_ACCESS), "Should have 1 file access event");

     * @param remoteAddress remote address
     */
    public void logAuthentication(boolean success, String username, String authMethod, String remoteAddress) {
        EventType type = success ? EventType.AUTHENTICATION_SUCCESS : EventType.AUTHENTICATION_FAILURE;
        Severity severity = success ? Severity.INFO : Severity.WARNING;

        // Pre-mask sensitive data to avoid repeated processing

    @Test
    void testDifferentEventTypes() {
        for (WitnessEventType eventType : WitnessEventType.values()) {
            WitnessNotification testNotification = new WitnessNotification(eventType, "Resource" + eventType.getValue());
            assertEquals(eventType, testNotification.getEventType());
            assertEquals("Resource" + eventType.getValue(), testNotification.getResourceName());
        }
    }

    @Test

     *
     * @param eventType the event type
     * @param resourceName the resource name
     */
    public void sendNotification(WitnessEventType eventType, String resourceName) {
        // In a real implementation, this would send notifications to registered clients
        // For the mock, we just log it
        log.info("Mock sending notification: {} for resource: {}", eventType, resourceName);

            WitnessNotification notification = new WitnessNotification();

            // Set event type based on message type
            WitnessEventType eventType = convertMessageTypeToEventType(message.getType());
            notification.setEventType(eventType);
            notification.setTimestamp(message.getTimestamp());

            // Set resource name based on message content

    public static final int WITNESS_RESOURCE_STATE_UNAVAILABLE = 0x000000FF;
    
    public WitnessNotification(WitnessEventType eventType, String resourceName) {
        this.eventType = eventType;
        this.resourceName = resourceName;
        this.timestamp = System.currentTimeMillis();
        this.newIPAddresses = new ArrayList<>();

import jcifs.CIFSContext;
import jcifs.CIFSException;
import jcifs.Credentials;
import jcifs.RuntimeCIFSException;
import jcifs.audit.SecurityAuditLogger;
import jcifs.audit.SecurityAuditLogger.EventType;
import jcifs.audit.SecurityAuditLogger.Severity;
import jcifs.spnego.NegTokenInit;
import jcifs.util.Crypto;
import jcifs.util.SecureKeyManager;
import jcifs.util.Strings;

/**