siem

Documentation

Index

• func InitBackLogManager(logFile string, bpChan chan<- bool, holdDuration int) (err error)
• func InitDirectives(confDir string, ch <-chan event.NormalizedEvent, minAlarmLifetime int) error
• type Directives
  • func LoadDirectivesFromFile(confDir string, namePattern string) (res Directives, totalFromFile int, err error)

Functions

func InitBackLogManager

func InitBackLogManager(logFile string, bpChan chan<- bool, holdDuration int) (err error)

InitBackLogManager initialize backlog and ticker

func InitDirectives

func InitDirectives(confDir string, ch <-chan event.NormalizedEvent, minAlarmLifetime int) error

InitDirectives initialize directive from directive_*.json files in confDir then start backlog manager for each directive

Types

type Directives

type Directives struct {
	Dirs []directive `json:"directives"`
}

Directives group directive together

func LoadDirectivesFromFile

func LoadDirectivesFromFile(confDir string, namePattern string) (res Directives, totalFromFile int, err error)

LoadDirectivesFromFile load directive from namePattern (glob) files in confDir