auditd

Documentation

Index

• func Chop(rulePath string, outputType string) (interface{}, error)
• func FindLog() (string, error)
• type AuditEvent
  • func ParseEvents(logFile string) ([]AuditEvent, error)
  • func (e AuditEvent) Keywords() ([]string, bool)
  • func (e AuditEvent) Select(name string) (interface{}, bool)

Functions

func Chop

func Chop(rulePath string, outputType string) (interface{}, error)

func FindLog

func FindLog() (string, error)

FindLog finds the location of the audit log file by parsing the auditd.conf file

Types

type AuditEvent

type AuditEvent struct {
	Type string
	Data map[string]string
}

AuditEvent represents an Audit log event

func ParseEvents

func ParseEvents(logFile string) ([]AuditEvent, error)

func (AuditEvent) Keywords

func (e AuditEvent) Keywords() ([]string, bool)

Keywords returns the keywords for an AuditEvent

func (AuditEvent) Select

func (e AuditEvent) Select(name string) (interface{}, bool)

Select returns the value of the given field for an AuditEvent