parser

package

v0.0.0-...-f219ead Latest Latest Go to latest Published: Sep 6, 2024 License: AGPL-3.0 Imports: 14 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/0days-ru/UTMStack

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
type BeatsParser
- func GetBeatsParser() *BeatsParser
- func (p *BeatsParser) IdentifySource(log string) (configuration.LogType, error)
- func (p *BeatsParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)
type CiscoParser
- func GetCiscoParser() *CiscoParser
- func (p *CiscoParser) IdentifySource(log string) (configuration.LogType, error)
- func (p *CiscoParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)
type NetflowObject
type NetflowParser
- func GetNetflowParser() *NetflowParser
- func (p *NetflowParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)
type Parser
- func GetParser(typ string) Parser

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	RegexspBeats = map[configuration.LogType]string{
		configuration.LogTypeApacheModule:        `"type":"apache"|"module":"apache"`,
		configuration.LogTypeLinuxAuditdModule:   `"type":"auditd"|"module":"auditd"`,
		configuration.LogTypeElasticsearchModule: `"type":"elasticsearch"|"module":"elasticsearch"`,
		configuration.LogTypeKafkaModule:         `"type":"kafka"|"module":"kafka"`,
		configuration.LogTypeKibanaModule:        `"type":"kibana"|"module":"kibana"`,
		configuration.LogTypeLogstashModule:      `"type":"logstash"|"module":"logstash"`,
		configuration.LogTypeMongodbModule:       `"type":"mongodb"|"module":"mongodb"`,
		configuration.LogTypeMysqlModule:         `"type":"mysql"|"module":"mysql"`,
		configuration.LogTypeNginxModule:         `"type":"nginx"|"module":"nginx"`,
		configuration.LogTypeOsqueryModule:       `"type":"osquery"|"module":"osquery"`,
		configuration.LogTypePostgresqlModule:    `"type":"postgresql"|"module":"postgresql"`,
		configuration.LogTypeRedisModule:         `"type":"redis"|"module":"redis"`,
		configuration.LogTypeLinuxAgent:          `"type":"system"|"module":"system"`,
		configuration.LogTypeIisModule:           `"type":"iis"|"module":"iis"`,
		configuration.LogTypeTraefikModule:       `"type":"traefik"|"module":"traefik"`,
		configuration.LogTypeNatsModule:          `"type":"nats"|"module":"nats"`,
		configuration.LogTypeHaproxyModule:       `"type":"haproxy"|"module":"haproxy"`,
	}
)

View Source

var (
	RegexspCisco = map[configuration.LogType]string{
		configuration.LogTypeCiscoAsa:       `%ASA-`,
		configuration.LogTypeCiscoFirepower: `%FTD-`,
		configuration.LogTypeCiscoSwitch:    `%(\w|_)+-((\b\w+\b-\b\w+\b-)?)(\d)-([A-Z]|_)+`,
	}
)

Functions ¶

This section is empty.

Types ¶

type BeatsParser ¶

type BeatsParser struct{}

func GetBeatsParser ¶

func GetBeatsParser() *BeatsParser

func (*BeatsParser) IdentifySource ¶

func (p *BeatsParser) IdentifySource(log string) (configuration.LogType, error)

func (*BeatsParser) ProcessData ¶

func (p *BeatsParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)

type CiscoParser ¶

type CiscoParser struct{}

func GetCiscoParser ¶

func GetCiscoParser() *CiscoParser

func (*CiscoParser) IdentifySource ¶

func (p *CiscoParser) IdentifySource(log string) (configuration.LogType, error)

func (*CiscoParser) ProcessData ¶

func (p *CiscoParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)

type NetflowObject ¶

type NetflowObject struct {
	Remote  string
	Message netflow.Message
}

type NetflowParser ¶

type NetflowParser struct {
}

func GetNetflowParser ¶

func GetNetflowParser() *NetflowParser

func (*NetflowParser) ProcessData ¶

func (p *NetflowParser) ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)

type Parser ¶

type Parser interface {
	ProcessData(logBatch interface{}, h *logger.Logger) (map[string][]string, error)
}

func GetParser ¶

func GetParser(typ string) Parser

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
netflow

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL