/* ==============================================================================
   SIEM-LITE: Splunk-Inspired Minimalist Dark Mode CSS
   Font: Courier / Monospace for all security data
   Colors: Obsidian Black (#0b0e14, #11161f), Splunk Green (#5cc05c, #65a637)
   ============================================================================== */

:root {
  --bg-primary: #0a0d12;
  --bg-secondary: #11161f;
  --bg-card: #151b26;
  --bg-hover: #1c2433;
  --border-color: #242e3f;
  --border-light: #303d52;
  
  --splunk-green: #5cc05c;
  --splunk-green-glow: rgba(92, 192, 92, 0.25);
  --splunk-green-dark: #3e883e;

  --color-critical: #ff4d4f;
  --color-high: #fa8c16;
  --color-medium: #faad14;
  --color-low: #1890ff;
  --color-info: #52c41a;

  --text-primary: #e6edf3;
  --text-secondary: #8b949e;
  --text-muted: #6e7681;
  --text-code: #58a6ff;

  --font-sans: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
  --font-mono: "Courier New", Courier, "SF Mono", Menlo, Consolas, monospace;
}

* {
  box-sizing: border-box;
  margin: 0;
  padding: 0;
}

body {
  background-color: var(--bg-primary);
  color: var(--text-primary);
  font-family: var(--font-sans);
  font-size: 13px;
  line-height: 1.5;
  overflow-x: hidden;
}

/* Monospace applies strictly to data, code, timestamps, and log streams */
.mono, .font-mono, .log-line, .json-box, .field-val, .badge-mono, .kpi-number, .search-input {
  font-family: var(--font-mono) !important;
  letter-spacing: -0.2px;
}

/* ================= Top Bar / Header ================= */
.splunk-navbar {
  background-color: #000000;
  border-bottom: 2px solid var(--border-color);
  display: flex;
  justify-content: space-between;
  align-items: center;
  padding: 0 16px;
  height: 48px;
}

.brand {
  display: flex;
  align-items: center;
  gap: 10px;
}

.brand-icon {
  color: var(--splunk-green);
  font-family: var(--font-mono);
  font-size: 18px;
  font-weight: 900;
  letter-spacing: -1px;
}

.brand-title {
  font-size: 15px;
  font-weight: 700;
  color: #ffffff;
  letter-spacing: 0.5px;
}

.brand-tag {
  background: rgba(92, 192, 92, 0.15);
  border: 1px solid var(--splunk-green);
  color: var(--splunk-green);
  font-size: 10px;
  font-weight: 600;
  padding: 2px 6px;
  border-radius: 3px;
  font-family: var(--font-mono);
}

.nav-actions {
  display: flex;
  align-items: center;
  gap: 12px;
}

.status-pill {
  display: flex;
  align-items: center;
  gap: 6px;
  font-size: 11px;
  color: var(--text-secondary);
  background: var(--bg-secondary);
  padding: 4px 10px;
  border-radius: 12px;
  border: 1px solid var(--border-color);
}

.live-dot {
  width: 8px;
  height: 8px;
  background-color: var(--splunk-green);
  border-radius: 50%;
  box-shadow: 0 0 8px var(--splunk-green);
  animation: pulse 2s infinite;
}

@keyframes pulse {
  0% { opacity: 0.4; }
  50% { opacity: 1; }
  100% { opacity: 0.4; }
}

.btn-splunk {
  background: #1f2733;
  color: #fff;
  border: 1px solid var(--border-color);
  padding: 6px 12px;
  border-radius: 4px;
  cursor: pointer;
  font-size: 12px;
  display: inline-flex;
  align-items: center;
  gap: 6px;
  transition: all 0.2s;
}

.btn-splunk:hover {
  background: #2a3444;
  border-color: var(--border-light);
}

.btn-splunk-green {
  background: var(--splunk-green);
  color: #000;
  font-weight: 600;
  border: none;
}

.btn-splunk-green:hover {
  background: #6ed16e;
}

/* ================= Tabs Navigation ================= */
.tabs-bar {
  background-color: var(--bg-secondary);
  border-bottom: 1px solid var(--border-color);
  display: flex;
  gap: 4px;
  padding: 0 16px;
  overflow-x: auto;
}

.tab-btn {
  background: transparent;
  color: var(--text-secondary);
  border: none;
  border-bottom: 3px solid transparent;
  padding: 10px 14px;
  font-size: 12px;
  font-weight: 600;
  cursor: pointer;
  white-space: nowrap;
  display: flex;
  align-items: center;
  gap: 8px;
  transition: all 0.15s;
}

.tab-btn:hover {
  color: var(--text-primary);
  background: rgba(255, 255, 255, 0.03);
}

.tab-btn.active {
  color: #ffffff;
  border-bottom-color: var(--splunk-green);
  background: rgba(92, 192, 92, 0.08);
}

.tab-count {
  background: #252e3d;
  color: #fff;
  padding: 1px 6px;
  border-radius: 10px;
  font-size: 10px;
  font-family: var(--font-mono);
}

/* ================= Main Container ================= */
.main-container {
  padding: 16px;
  max-width: 1700px;
  margin: 0 auto;
}

/* ================= Search & Filter Bar ================= */
.search-section {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 12px;
  margin-bottom: 16px;
  display: flex;
  flex-wrap: wrap;
  gap: 10px;
  align-items: center;
}

.search-box {
  flex: 1;
  min-width: 300px;
  position: relative;
  display: flex;
}

.search-prefix {
  background: #111620;
  border: 1px solid var(--border-light);
  border-right: none;
  color: var(--splunk-green);
  padding: 8px 12px;
  border-radius: 4px 0 0 4px;
  font-size: 13px;
  font-weight: bold;
}

.search-input {
  flex: 1;
  background: #090c10;
  border: 1px solid var(--border-light);
  color: #ffffff;
  padding: 8px 12px;
  font-size: 13px;
  border-radius: 0 4px 4px 0;
  outline: none;
  transition: border-color 0.2s;
}

.search-input:focus {
  border-color: var(--splunk-green);
  box-shadow: 0 0 6px var(--splunk-green-glow);
}

.select-splunk {
  background: #111620;
  border: 1px solid var(--border-light);
  color: var(--text-primary);
  padding: 8px 12px;
  border-radius: 4px;
  font-size: 12px;
  outline: none;
  cursor: pointer;
}

/* ================= KPI Cards ================= */
.kpi-grid {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(210px, 1fr));
  gap: 12px;
  margin-bottom: 16px;
}

.kpi-card {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 12px 16px;
  display: flex;
  flex-direction: column;
  justify-content: space-between;
  border-left: 4px solid var(--border-light);
}

.kpi-card.kpi-critical { border-left-color: var(--color-critical); }
.kpi-card.kpi-high { border-left-color: var(--color-high); }
.kpi-card.kpi-blocked { border-left-color: var(--splunk-green); }
.kpi-card.kpi-devices { border-left-color: #58a6ff; }

.kpi-title {
  color: var(--text-secondary);
  font-size: 11px;
  text-transform: uppercase;
  font-weight: 600;
  letter-spacing: 0.5px;
}

.kpi-value-row {
  display: flex;
  align-items: baseline;
  justify-content: space-between;
  margin-top: 6px;
}

.kpi-number {
  font-size: 26px;
  font-weight: 700;
  color: #ffffff;
}

.kpi-sub {
  font-size: 11px;
  color: var(--text-muted);
}

/* ================= Timeline Histogram ================= */
.histogram-card {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 14px;
  margin-bottom: 16px;
}

.card-header {
  display: flex;
  justify-content: space-between;
  align-items: center;
  margin-bottom: 10px;
}

.card-title {
  font-size: 13px;
  font-weight: 600;
  color: var(--text-primary);
  display: flex;
  align-items: center;
  gap: 8px;
}

.histogram-chart-svg {
  width: 100%;
  height: 100px;
  display: block;
}

.histogram-bar {
  cursor: pointer;
  transition: opacity 0.2s;
}

.histogram-bar:hover {
  opacity: 0.8;
}

/* ================= Analytics Row ================= */
.analytics-grid {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
  gap: 12px;
  margin-bottom: 16px;
}

.analytics-card {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 12px 14px;
}

.breakdown-list {
  list-style: none;
  margin-top: 8px;
}

.breakdown-item {
  display: flex;
  justify-content: space-between;
  align-items: center;
  padding: 5px 0;
  border-bottom: 1px solid rgba(255, 255, 255, 0.05);
  font-size: 12px;
}

.breakdown-key {
  color: var(--text-primary);
  display: flex;
  align-items: center;
  gap: 6px;
  cursor: pointer;
}

.breakdown-key:hover {
  color: var(--splunk-green);
  text-decoration: underline;
}

.breakdown-count {
  background: #111620;
  border: 1px solid var(--border-color);
  color: #fff;
  padding: 2px 7px;
  border-radius: 10px;
  font-size: 11px;
}

/* ================= Event Viewer Table ================= */
.events-section {
  display: grid;
  grid-template-columns: 240px 1fr;
  gap: 14px;
}

@media (max-width: 900px) {
  .events-section {
    grid-template-columns: 1fr;
  }
}

.fields-sidebar {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 12px;
}

.sidebar-title {
  font-size: 11px;
  text-transform: uppercase;
  color: var(--text-secondary);
  font-weight: 700;
  margin-bottom: 10px;
  border-bottom: 1px solid var(--border-color);
  padding-bottom: 6px;
}

.field-group {
  margin-bottom: 12px;
}

.field-label {
  font-size: 11px;
  font-weight: 600;
  color: #58a6ff;
  margin-bottom: 4px;
  display: block;
}

.field-item {
  display: flex;
  justify-content: space-between;
  padding: 3px 6px;
  border-radius: 3px;
  font-size: 11px;
  cursor: pointer;
  color: var(--text-secondary);
}

.field-item:hover {
  background: var(--bg-hover);
  color: #fff;
}

.events-panel {
  background: var(--bg-card);
  border: 1px solid var(--border-color);
  border-radius: 4px;
  overflow: hidden;
}

.events-header {
  padding: 10px 14px;
  background: #111620;
  border-bottom: 1px solid var(--border-color);
  display: flex;
  justify-content: space-between;
  align-items: center;
}

.events-table {
  width: 100%;
  border-collapse: collapse;
}

.events-table th {
  background: #0f141c;
  color: var(--text-secondary);
  text-align: left;
  padding: 8px 12px;
  font-size: 11px;
  border-bottom: 1px solid var(--border-color);
  text-transform: uppercase;
  font-weight: 600;
}

.event-row {
  border-bottom: 1px solid rgba(255, 255, 255, 0.04);
  cursor: pointer;
  transition: background 0.15s;
}

.event-row:hover {
  background: var(--bg-hover);
}

.event-row.expanded {
  background: #18202d;
  border-left: 3px solid var(--splunk-green);
}

.events-table td {
  padding: 8px 12px;
  vertical-align: top;
  font-size: 12px;
}

/* Badges */
.badge {
  display: inline-block;
  padding: 2px 7px;
  border-radius: 3px;
  font-size: 10px;
  font-weight: 700;
  text-transform: uppercase;
  letter-spacing: 0.5px;
}

.badge-critical { background: rgba(255, 77, 79, 0.2); color: var(--color-critical); border: 1px solid rgba(255, 77, 79, 0.4); }
.badge-high     { background: rgba(250, 140, 22, 0.2); color: var(--color-high); border: 1px solid rgba(250, 140, 22, 0.4); }
.badge-medium   { background: rgba(250, 173, 20, 0.2); color: var(--color-medium); border: 1px solid rgba(250, 173, 20, 0.4); }
.badge-low      { background: rgba(24, 144, 255, 0.2); color: var(--color-low); border: 1px solid rgba(24, 144, 255, 0.4); }
.badge-info     { background: rgba(82, 196, 26, 0.2); color: var(--color-info); border: 1px solid rgba(82, 196, 26, 0.4); }

.badge-action {
  background: #252e3d;
  color: #c9d1d9;
  font-family: var(--font-mono);
  font-size: 11px;
  padding: 1px 6px;
  border-radius: 3px;
}

.badge-action.blocked, .badge-action.quarantined {
  background: rgba(255, 77, 79, 0.15);
  color: #ff7875;
  border: 1px solid rgba(255, 77, 79, 0.3);
}

.badge-mitre {
  background: rgba(88, 166, 255, 0.15);
  color: #58a6ff;
  border: 1px solid rgba(88, 166, 255, 0.3);
  font-family: var(--font-mono);
  padding: 1px 5px;
  border-radius: 3px;
  font-size: 10px;
}

/* Expanded Detail Row */
.detail-row {
  background: #0d1117;
  border-bottom: 1px solid var(--border-color);
}

.detail-content {
  padding: 14px 20px;
}

.detail-actions {
  display: flex;
  gap: 8px;
  margin-bottom: 12px;
}

.json-box {
  background: #000000;
  border: 1px solid var(--border-color);
  border-radius: 4px;
  padding: 12px;
  color: #79c0ff;
  font-size: 12px;
  max-height: 350px;
  overflow-y: auto;
  white-space: pre-wrap;
  word-break: break-all;
}

/* Modal */
.modal-overlay {
  display: none;
  position: fixed;
  top: 0; left: 0; right: 0; bottom: 0;
  background: rgba(0, 0, 0, 0.75);
  backdrop-filter: blur(2px);
  z-index: 1000;
  justify-content: center;
  align-items: center;
}

.modal-overlay.open {
  display: flex;
}

.modal-box {
  background: var(--bg-card);
  border: 1px solid var(--border-light);
  border-radius: 6px;
  width: 90%;
  max-width: 680px;
  box-shadow: 0 10px 30px rgba(0, 0, 0, 0.8);
  overflow: hidden;
}

.modal-header {
  background: #0f141c;
  padding: 14px 18px;
  display: flex;
  justify-content: space-between;
  align-items: center;
  border-bottom: 1px solid var(--border-color);
}

.modal-body {
  padding: 18px;
  max-height: 70vh;
  overflow-y: auto;
}

.modal-footer {
  padding: 12px 18px;
  background: #0f141c;
  border-top: 1px solid var(--border-color);
  display: flex;
  justify-content: flex-end;
  gap: 10px;
}

.code-snippet {
  background: #000;
  border: 1px solid var(--border-color);
  padding: 10px;
  border-radius: 4px;
  color: #e6edf3;
  margin: 8px 0 16px 0;
  font-size: 11px;
  position: relative;
}

.code-snippet code {
  color: #7ee787;
  font-family: var(--font-mono);
}

/* User Pill & Logout */
.user-pill {
  display: flex;
  align-items: center;
  gap: 8px;
  background: #111620;
  border: 1px solid var(--border-color);
  padding: 4px 10px;
  border-radius: 12px;
  font-size: 11px;
  color: #e6edf3;
}

.btn-logout {
  background: none;
  border: none;
  cursor: pointer;
  color: var(--text-muted);
  font-size: 13px;
  padding: 0 2px;
  transition: color 0.2s;
}

.btn-logout:hover {
  color: #ff7875;
}

/* Splunk Login Overlay */
.login-overlay {
  position: fixed;
  top: 0; left: 0; right: 0; bottom: 0;
  background: radial-gradient(circle at center, #151b26 0%, #080b0f 100%);
  z-index: 9999;
  display: flex;
  justify-content: center;
  align-items: center;
}

.login-card {
  background: #0f141c;
  border: 1px solid var(--border-light);
  border-radius: 6px;
  width: 90%;
  max-width: 420px;
  padding: 32px 28px;
  box-shadow: 0 16px 40px rgba(0, 0, 0, 0.9);
  text-align: left;
}

.login-brand {
  display: flex;
  align-items: center;
  gap: 10px;
  margin-bottom: 20px;
}

.login-brand-icon {
  color: var(--splunk-green);
  font-size: 24px;
  font-weight: 900;
  letter-spacing: -1px;
}

.login-header-title {
  color: #fff;
  font-size: 18px;
  font-weight: 700;
}

.login-subtitle {
  color: var(--text-secondary);
  font-size: 12px;
  margin-bottom: 24px;
}

.login-form-group {
  margin-bottom: 16px;
}

.login-label {
  display: block;
  font-size: 11px;
  font-weight: 600;
  color: var(--text-secondary);
  text-transform: uppercase;
  letter-spacing: 0.5px;
  margin-bottom: 6px;
}

.login-input {
  width: 100%;
  background: #080b0f;
  border: 1px solid var(--border-light);
  color: #fff;
  padding: 10px 12px;
  font-size: 13px;
  border-radius: 4px;
  outline: none;
  transition: border-color 0.2s;
}

.login-input:focus {
  border-color: var(--splunk-green);
  box-shadow: 0 0 8px var(--splunk-green-glow);
}

.btn-login-submit {
  width: 100%;
  background: var(--splunk-green);
  color: #000;
  font-weight: 700;
  border: none;
  padding: 11px;
  border-radius: 4px;
  cursor: pointer;
  font-size: 13px;
  margin-top: 10px;
  transition: background 0.2s;
}

.btn-login-submit:hover {
  background: #6ed16e;
}

.login-error {
  display: none;
  background: rgba(255, 77, 79, 0.15);
  border: 1px solid rgba(255, 77, 79, 0.4);
  color: #ff7875;
  padding: 8px 12px;
  border-radius: 4px;
  font-size: 12px;
  margin-bottom: 16px;
}

.login-hint {
  margin-top: 20px;
  padding: 10px;
  background: #080b0f;
  border: 1px dashed var(--border-color);
  border-radius: 4px;
  font-size: 11px;
  color: var(--text-muted);
}