Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

auparse

package

Go to main page

Versions in this module

v2

v2.2.3

Nov 5, 2021

v2.2.2

Oct 29, 2021

v2.2.1

Oct 29, 2021

Changes in this version

+ var AuditArchNames = map[AuditArch]string

+ var AuditErrnoToName = map[int]string

+ var AuditErrnoToNum = map[string]int

+ var AuditSyscalls = map[string]map[int]string

+ type AuditArch uint32

+ const AUDIT_ARCH_AARCH64

+ const AUDIT_ARCH_ARM

+ const AUDIT_ARCH_ARMEB

+ const AUDIT_ARCH_CRIS

+ const AUDIT_ARCH_FRV

+ const AUDIT_ARCH_I386

+ const AUDIT_ARCH_IA64

+ const AUDIT_ARCH_M32R

+ const AUDIT_ARCH_M68K

+ const AUDIT_ARCH_MIPS

+ const AUDIT_ARCH_MIPS64

+ const AUDIT_ARCH_MIPS64N32

+ const AUDIT_ARCH_MIPSEL

+ const AUDIT_ARCH_MIPSEL64

+ const AUDIT_ARCH_MIPSEL64N32

+ const AUDIT_ARCH_PARISC

+ const AUDIT_ARCH_PARISC64

+ const AUDIT_ARCH_PPC

+ const AUDIT_ARCH_PPC64

+ const AUDIT_ARCH_PPC64LE

+ const AUDIT_ARCH_S390

+ const AUDIT_ARCH_S390X

+ const AUDIT_ARCH_SH

+ const AUDIT_ARCH_SH64

+ const AUDIT_ARCH_SHEL

+ const AUDIT_ARCH_SHEL64

+ const AUDIT_ARCH_SPARC

+ const AUDIT_ARCH_SPARC64

+ const AUDIT_ARCH_X86_64

+ func (a AuditArch) String() string

+ type AuditMessage struct

+ RawData string

+ RecordType AuditMessageType

+ Sequence uint32

+ Timestamp time.Time

+ func Parse(typ AuditMessageType, message string) (*AuditMessage, error)

+ func ParseLogLine(line string) (*AuditMessage, error)

+ func (m *AuditMessage) Data() (map[string]string, error)

+ func (m *AuditMessage) Tags() ([]string, error)

+ func (m *AuditMessage) ToMapStr() map[string]interface{}

+ type AuditMessageType uint16

+ const AUDIT_AA

+ const AUDIT_ACCT_LOCK

+ const AUDIT_ACCT_UNLOCK

+ const AUDIT_ADD

+ const AUDIT_ADD_GROUP

+ const AUDIT_ADD_RULE

+ const AUDIT_ADD_USER

+ const AUDIT_ANOM_ABEND

+ const AUDIT_ANOM_ACCESS_FS

+ const AUDIT_ANOM_ADD_ACCT

+ const AUDIT_ANOM_AMTU_FAIL

+ const AUDIT_ANOM_CRYPTO_FAIL

+ const AUDIT_ANOM_DEL_ACCT

+ const AUDIT_ANOM_EXEC

+ const AUDIT_ANOM_LINK

+ const AUDIT_ANOM_LOGIN_ACCT

+ const AUDIT_ANOM_LOGIN_FAILURES

+ const AUDIT_ANOM_LOGIN_LOCATION

+ const AUDIT_ANOM_LOGIN_SERVICE

+ const AUDIT_ANOM_LOGIN_SESSIONS

+ const AUDIT_ANOM_LOGIN_TIME

+ const AUDIT_ANOM_MAX_DAC

+ const AUDIT_ANOM_MAX_MAC

+ const AUDIT_ANOM_MK_EXEC

+ const AUDIT_ANOM_MOD_ACCT

+ const AUDIT_ANOM_PROMISCUOUS

+ const AUDIT_ANOM_RBAC_FAIL

+ const AUDIT_ANOM_RBAC_INTEGRITY_FAIL

+ const AUDIT_ANOM_ROOT_TRANS

+ const AUDIT_APPARMOR_ALLOWED

+ const AUDIT_APPARMOR_AUDIT

+ const AUDIT_APPARMOR_DENIED

+ const AUDIT_APPARMOR_ERROR

+ const AUDIT_APPARMOR_HINT

+ const AUDIT_APPARMOR_STATUS

+ const AUDIT_AVC

+ const AUDIT_AVC_PATH

+ const AUDIT_BPRM_FCAPS

+ const AUDIT_CAPSET

+ const AUDIT_CHGRP_ID

+ const AUDIT_CHUSER_ID

+ const AUDIT_CONFIG_CHANGE

+ const AUDIT_CRED_ACQ

+ const AUDIT_CRED_DISP

+ const AUDIT_CRED_REFR

+ const AUDIT_CRYPTO_FAILURE_USER

+ const AUDIT_CRYPTO_IKE_SA

+ const AUDIT_CRYPTO_IPSEC_SA

+ const AUDIT_CRYPTO_KEY_USER

+ const AUDIT_CRYPTO_LOGIN

+ const AUDIT_CRYPTO_LOGOUT

+ const AUDIT_CRYPTO_PARAM_CHANGE_USER

+ const AUDIT_CRYPTO_REPLAY_USER

+ const AUDIT_CRYPTO_SESSION

+ const AUDIT_CRYPTO_TEST_USER

+ const AUDIT_CWD

+ const AUDIT_DAC_CHECK

+ const AUDIT_DAEMON_ABORT

+ const AUDIT_DAEMON_ACCEPT

+ const AUDIT_DAEMON_CLOSE

+ const AUDIT_DAEMON_CONFIG

+ const AUDIT_DAEMON_END

+ const AUDIT_DAEMON_ERR

+ const AUDIT_DAEMON_RECONFIG

+ const AUDIT_DAEMON_RESUME

+ const AUDIT_DAEMON_ROTATE

+ const AUDIT_DAEMON_START

+ const AUDIT_DEL

+ const AUDIT_DEL_GROUP

+ const AUDIT_DEL_RULE

+ const AUDIT_DEL_USER

+ const AUDIT_DEV_ALLOC

+ const AUDIT_DEV_DEALLOC

+ const AUDIT_EOE

+ const AUDIT_EXECVE

+ const AUDIT_FANOTIFY

+ const AUDIT_FD_PAIR

+ const AUDIT_FEATURE_CHANGE

+ const AUDIT_FIRST_KERN_CRYPTO_MSG

+ const AUDIT_FS_RELABEL

+ const AUDIT_GET

+ const AUDIT_GET_FEATURE

+ const AUDIT_GRP_AUTH

+ const AUDIT_GRP_CHAUTHTOK

+ const AUDIT_GRP_MGMT

+ const AUDIT_INTEGRITY_DATA

+ const AUDIT_INTEGRITY_HASH

+ const AUDIT_INTEGRITY_LAST_MSG

+ const AUDIT_INTEGRITY_METADATA

+ const AUDIT_INTEGRITY_PCR

+ const AUDIT_INTEGRITY_RULE

+ const AUDIT_INTEGRITY_STATUS

+ const AUDIT_IPC

+ const AUDIT_IPC_SET_PERM

+ const AUDIT_KERNEL

+ const AUDIT_KERNEL_OTHER

+ const AUDIT_KERN_MODULE

+ const AUDIT_LABEL_LEVEL_CHANGE

+ const AUDIT_LABEL_OVERRIDE

+ const AUDIT_LAST_ANOM_MSG

+ const AUDIT_LAST_ANOM_RESP

+ const AUDIT_LAST_APPARMOR

+ const AUDIT_LAST_CRYPTO_MSG

+ const AUDIT_LAST_DAEMON

+ const AUDIT_LAST_EVENT

+ const AUDIT_LAST_KERN_ANOM_MSG

+ const AUDIT_LAST_KERN_CRYPTO_MSG

+ const AUDIT_LAST_SELINUX

+ const AUDIT_LAST_USER_LSPP_MSG

+ const AUDIT_LAST_USER_MSG

+ const AUDIT_LAST_USER_MSG2

+ const AUDIT_LAST_VIRT_MSG

+ const AUDIT_LIST

+ const AUDIT_LIST_RULES

+ const AUDIT_LOGIN

+ const AUDIT_MAC_CALIPSO_ADD

+ const AUDIT_MAC_CALIPSO_DEL

+ const AUDIT_MAC_CHECK

+ const AUDIT_MAC_CIPSOV4_ADD

+ const AUDIT_MAC_CIPSOV4_DEL

+ const AUDIT_MAC_CONFIG_CHANGE

+ const AUDIT_MAC_IPSEC_ADDSA

+ const AUDIT_MAC_IPSEC_ADDSPD

+ const AUDIT_MAC_IPSEC_DELSA

+ const AUDIT_MAC_IPSEC_DELSPD

+ const AUDIT_MAC_IPSEC_EVENT

+ const AUDIT_MAC_MAP_ADD

+ const AUDIT_MAC_MAP_DEL

+ const AUDIT_MAC_POLICY_LOAD

+ const AUDIT_MAC_STATUS

+ const AUDIT_MAC_UNLBL_ALLOW

+ const AUDIT_MAC_UNLBL_STCADD

+ const AUDIT_MAC_UNLBL_STCDEL

+ const AUDIT_MAKE_EQUIV

+ const AUDIT_MMAP

+ const AUDIT_MQ_GETSETATTR

+ const AUDIT_MQ_NOTIFY

+ const AUDIT_MQ_OPEN

+ const AUDIT_MQ_SENDRECV

+ const AUDIT_NETFILTER_CFG

+ const AUDIT_NETFILTER_PKT

+ const AUDIT_OBJ_PID

+ const AUDIT_PATH

+ const AUDIT_PROCTITLE

+ const AUDIT_REPLACE

+ const AUDIT_RESP_ACCT_LOCK

+ const AUDIT_RESP_ACCT_LOCK_TIMED

+ const AUDIT_RESP_ACCT_REMOTE

+ const AUDIT_RESP_ACCT_UNLOCK_TIMED

+ const AUDIT_RESP_ALERT

+ const AUDIT_RESP_ANOMALY

+ const AUDIT_RESP_EXEC

+ const AUDIT_RESP_HALT

+ const AUDIT_RESP_KILL_PROC

+ const AUDIT_RESP_ORIGIN_BLOCK

+ const AUDIT_RESP_ORIGIN_BLOCK_TIMED

+ const AUDIT_RESP_SEBOOL

+ const AUDIT_RESP_SINGLE

+ const AUDIT_RESP_TERM_ACCESS

+ const AUDIT_RESP_TERM_LOCK

+ const AUDIT_ROLE_ASSIGN

+ const AUDIT_ROLE_MODIFY

+ const AUDIT_ROLE_REMOVE

+ const AUDIT_SECCOMP

+ const AUDIT_SELINUX_ERR

+ const AUDIT_SERVICE_START

+ const AUDIT_SERVICE_STOP

+ const AUDIT_SET

+ const AUDIT_SET_FEATURE

+ const AUDIT_SIGNAL_INFO

+ const AUDIT_SOCKADDR

+ const AUDIT_SOCKETCALL

+ const AUDIT_SOFTWARE_UPDATE

+ const AUDIT_SYSCALL

+ const AUDIT_SYSTEM_BOOT

+ const AUDIT_SYSTEM_RUNLEVEL

+ const AUDIT_SYSTEM_SHUTDOWN

+ const AUDIT_TEST

+ const AUDIT_TRIM

+ const AUDIT_TRUSTED_APP

+ const AUDIT_TTY

+ const AUDIT_TTY_GET

+ const AUDIT_TTY_SET

+ const AUDIT_USER

+ const AUDIT_USER_ACCT

+ const AUDIT_USER_AUTH

+ const AUDIT_USER_AVC

+ const AUDIT_USER_CHAUTHTOK

+ const AUDIT_USER_CMD

+ const AUDIT_USER_DEVICE

+ const AUDIT_USER_END

+ const AUDIT_USER_ERR

+ const AUDIT_USER_LABELED_EXPORT

+ const AUDIT_USER_LOGIN

+ const AUDIT_USER_LOGOUT

+ const AUDIT_USER_MAC_CONFIG_CHANGE

+ const AUDIT_USER_MAC_POLICY_LOAD

+ const AUDIT_USER_MGMT

+ const AUDIT_USER_ROLE_CHANGE

+ const AUDIT_USER_SELINUX_ERR

+ const AUDIT_USER_START

+ const AUDIT_USER_TTY

+ const AUDIT_USER_UNLABELED_EXPORT

+ const AUDIT_USYS_CONFIG

+ const AUDIT_VIRT_CONTROL

+ const AUDIT_VIRT_CREATE

+ const AUDIT_VIRT_DESTROY

+ const AUDIT_VIRT_INTEGRITY_CHECK

+ const AUDIT_VIRT_MACHINE_ID

+ const AUDIT_VIRT_MIGRATE_IN

+ const AUDIT_VIRT_MIGRATE_OUT

+ const AUDIT_VIRT_RESOURCE

+ const AUDIT_WATCH_INS

+ const AUDIT_WATCH_LIST

+ const AUDIT_WATCH_REM

+ func GetAuditMessageType(name string) (AuditMessageType, error)

+ func (t *AuditMessageType) UnmarshalText(text []byte) error

+ func (t AuditMessageType) MarshalText() (text []byte, err error)

+ func (t AuditMessageType) String() string

Other modules containing this package

github.com/CyberSift/go-libaudit