beater

Documentation

Index

• func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error)
• type BroField
• type BroHeaderFields
  • func ReadHeader(filePath string) BroHeaderFields
• type BroLogLine
• type BroLogs
  • func ParseLogFile(filePath string) BroLogs
• type Brobeat
  • func (bt *Brobeat) Run(b *beat.Beat) error
  • func (bt *Brobeat) Stop()

Functions

func New

func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error)

New creates beater

Types

type BroField

type BroField struct {
	Name  string `json:"name"`
	Type  string `json:"type"`
	Value string `json:"value"`
}

BroField log line field

type BroHeaderFields

type BroHeaderFields struct {
	Separator    string   `json:"separator,omitempty"`
	SetSeparator string   `json:"set_separator,omitempty"`
	EmptyField   string   `json:"empty_field,omitempty"`
	UnsetField   string   `json:"unset_field,omitempty"`
	Path         string   `json:"path,omitempty"`
	Open         string   `json:"open,omitempty"`
	Fields       []string `json:"fields"`
	Types        []string `json:"types"`
}

BroHeaderFields log file header

func ReadHeader

func ReadHeader(filePath string) BroHeaderFields

ReadHeader parses the bro log header

type BroLogLine

type BroLogLine struct {
	Type         string     `json:"type,omitempty"`
	Created      string     `json:"created,omitempty"`
	SetSeparator string     `json:"set_separator,omitempty"`
	EmptyField   string     `json:"empty_field,omitempty"`
	UnsetField   string     `json:"unset_field,omitempty"`
	Fields       []BroField `json:"fields,omitempty"`
}

BroLogLine log entry

type BroLogs

type BroLogs struct {
	Logs []BroLogLine `json:"logs,omitempty"`
}

BroLogs is an array of BroLogLines

func ParseLogFile

func ParseLogFile(filePath string) BroLogs

ParseLogFile parses out a bro log file

type Brobeat

type Brobeat struct {
	// contains filtered or unexported fields
}

Brobeat beat struct

func (*Brobeat) Run

func (bt *Brobeat) Run(b *beat.Beat) error

Run start beater

func (*Brobeat) Stop

func (bt *Brobeat) Stop()

Stop stops beater