package
Version:
v0.14.3
Opens a new window with list of versions in this module.
Published: May 29, 2024
License: MIT
Opens a new window with license information.
Imports: 8
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
ECS event mapping functions.
ECS specification.
type Agent struct {
Type string `ecs:"type"`
Version string `ecs:"version"`
}
type Base struct {
Timestamp time.Time `ecs:"@timestamp"`
Message string `ecs:"message"`
Tags string `ecs:"tags"`
Labels map[string]interface{} `ecs:"labels"`
}
type Ecs struct {
Version string `ecs:"version"`
}
type Evt struct {
Kind string `ecs:"kind"`
Module string `ecs:"module"`
Dataset string `ecs:"dataset"`
Severity int64 `ecs:"severity"`
ID string `ecs:"id"`
Code string `ecs:"code"`
Provider string `ecs:"provider"`
Timezone string `ecs:"timezone"`
Created time.Time `ecs:"created"`
Ingested time.Time `ecs:"ingested"`
Original string `ecs:"original"`
Hash string `ecs:"hash"`
}
type File struct {
Name string `ecs:"name"`
Directory string `ecs:"directory"`
Extension string `ecs:"extension"`
DriveLetter string `ecs:"drive_letter"`
Path string `ecs:"path"`
Type string `ecs:"type"`
}
type Host struct {
Hostname string `ecs:"hostname"`
Name string `ecs:"name"`
}
type Process struct {
PID int64 `ecs:"pid"`
ThreadID int64 `ecs:"thread.id"`
}
type User struct {
ID string `ecs:"id"`
}
Source Files
¶
Click to show internal directories.
Click to hide internal directories.