mysqlaudit

Documentation

Overview

Package mysqlaudit consumes mysql audit logs

Index

• type AuditLineParser
  • func (j *AuditLineParser) ParseLine(line string) (map[string]interface{}, error)
• type Options
• type Parser
  • func (p *Parser) Init(options interface{}) error
  • func (p *Parser) ProcessLines(lines <-chan string, send chan<- event.Event, prefixRegex *parsers.ExtRegexp)

Types

type AuditLineParser

type AuditLineParser struct {
}

func (*AuditLineParser) ParseLine

func (j *AuditLineParser) ParseLine(line string) (map[string]interface{}, error)

type Options

type Options struct {
	TimeFieldName   string `long:"timefield" description:"Name of the field that contains a timestamp"`
	TimeFieldFormat string `long:"format" description:"Format of the timestamp found in timefield (supports strftime and Golang time formats)"`
	FilterRegex     string `long:"filter_regex" description:"a regular expression that will filter the input stream and only parse lines that match"`
	InvertFilter    bool   `long:"invert_filter" description:"change the filter_regex to only process lines that do *not* match"`

	NumParsers int `hidden:"true" description:"number of keyval parsers to spin up"`
}

type Parser

type Parser struct {
	// contains filtered or unexported fields
}

func (*Parser) Init

func (p *Parser) Init(options interface{}) error

func (*Parser) ProcessLines

func (p *Parser) ProcessLines(lines <-chan string, send chan<- event.Event, prefixRegex *parsers.ExtRegexp)