datadog

Documentation

Index

• Constants
• func GetDDSite() string
• type DatadogAlertFilter
• type DatadogAlertGeneratedAssertion
  • func (m *DatadogAlertGeneratedAssertion) Cleanup(detonationUuid string) error
  • func (m *DatadogAlertGeneratedAssertion) HasExpectedAlert(detonationUuid string) (bool, error)
  • func (m *DatadogAlertGeneratedAssertion) String() string
• type DatadogAlertGeneratedAssertionBuilder
  • func DatadogSecuritySignal(name string) *DatadogAlertGeneratedAssertionBuilder
  • func (m *DatadogAlertGeneratedAssertionBuilder) Cleanup(detonationUuid string) error
  • func (m *DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert(detonationUuid string) (bool, error)
  • func (m *DatadogAlertGeneratedAssertionBuilder) WithSeverity(severity string) *DatadogAlertGeneratedAssertionBuilder
• type DatadogSecuritySignalsAPI
• type DatadogSecuritySignalsAPIImpl
  • func (m *DatadogSecuritySignalsAPIImpl) CloseSignal(id string) error
  • func (m *DatadogSecuritySignalsAPIImpl) SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)

Constants

const QueryAllOpenSignals = `@workflow.triage.state:open`

const QueryOpenSignalsByAlertNameAndSeverity = `@workflow.triage.state:open @workflow.rule.name:"%s" %s`

const QuerySeverity = `status:%s`

Functions

func GetDDSite

func GetDDSite() string

Types

type DatadogAlertFilter

type DatadogAlertFilter struct {
	RuleName string `yaml:"rule-name"`
	Severity string
}

type DatadogAlertGeneratedAssertion

type DatadogAlertGeneratedAssertion struct {
	SignalsAPI  DatadogSecuritySignalsAPI
	AlertFilter *DatadogAlertFilter
}

func (*DatadogAlertGeneratedAssertion) Cleanup

func (m *DatadogAlertGeneratedAssertion) Cleanup(detonationUuid string) error

func (*DatadogAlertGeneratedAssertion) HasExpectedAlert

func (m *DatadogAlertGeneratedAssertion) HasExpectedAlert(detonationUuid string) (bool, error)

func (*DatadogAlertGeneratedAssertion) String

func (m *DatadogAlertGeneratedAssertion) String() string

type DatadogAlertGeneratedAssertionBuilder

type DatadogAlertGeneratedAssertionBuilder struct {
	DatadogAlertGeneratedAssertion
}

builder

func DatadogSecuritySignal

func DatadogSecuritySignal(name string) *DatadogAlertGeneratedAssertionBuilder

func (*DatadogAlertGeneratedAssertionBuilder) Cleanup

func (m *DatadogAlertGeneratedAssertionBuilder) Cleanup(detonationUuid string) error

func (*DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert

func (m *DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert(detonationUuid string) (bool, error)

func (*DatadogAlertGeneratedAssertionBuilder) WithSeverity

func (m *DatadogAlertGeneratedAssertionBuilder) WithSeverity(severity string) *DatadogAlertGeneratedAssertionBuilder

type DatadogSecuritySignalsAPI

type DatadogSecuritySignalsAPI interface {
	SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)
	CloseSignal(id string) error
}

type DatadogSecuritySignalsAPIImpl

type DatadogSecuritySignalsAPIImpl struct {
	// contains filtered or unexported fields
}

func (*DatadogSecuritySignalsAPIImpl) CloseSignal

func (m *DatadogSecuritySignalsAPIImpl) CloseSignal(id string) error

func (*DatadogSecuritySignalsAPIImpl) SearchSignals

func (m *DatadogSecuritySignalsAPIImpl) SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)