beater

Documentation

Index

• func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error)
• type CloudtrailFile
• type CloudtrailRecord
  • func (ctr *CloudtrailRecord) ToCommonMap() (common.MapStr, error)
• type Cloudtrailbeat
  • func (bt *Cloudtrailbeat) Run(b *beat.Beat) error
  • func (bt *Cloudtrailbeat) Stop()

Functions

func New

func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error)

New creates an instance of cloudtrailbeat.

Types

type CloudtrailFile

type CloudtrailFile struct {
	Records []CloudtrailRecord
}

type CloudtrailRecord

type CloudtrailRecord struct {
	EventTime           string `json:"eventTime"`
	EventVersion        string `json:"eventVersion"`
	UserIdentity        string `json:"userIdentity"`
	EventSource         string `json:"eventSource"`
	EventName           string `json:"eventName"`
	AWSRegion           string `json:"awsRegion"`
	SourceIPAddress     string `json:"sourceIPAddress"`
	UserAgent           string `json:"userAgent"`
	ErrorCode           string `json:"errorCode"`
	ErrorMessage        string `json:"errorMessage"`
	RequestParameters   string `json:"requestParameters"`
	ResponseElements    string `json:"responseElements"`
	AdditionalEventData string `json:"additionalEventData"`
	RequestID           string `json:"requestID"`
	EventID             string `json:"eventID"`
	EventType           string `json:"eventType"`
	ApiVersion          string `json:"apiVersion"`
	ManagementEvent     string `json:"managementEvent"`
	ReadOnly            string `json:"readOnly"`
	Resources           string `json:"resources"`
	RecipientAccountId  string `json:"recipientAccountId"`
	ServiceEventDetails string `json:"serviceEventDetails"`
	SharedEventID       string `json:"sharedEventID"`
	VpcEndpointId       string `json:"vpcEndpointId"`
}

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-record-contents.html

func (*CloudtrailRecord) ToCommonMap

func (ctr *CloudtrailRecord) ToCommonMap() (common.MapStr, error)

type Cloudtrailbeat

type Cloudtrailbeat struct {
	// contains filtered or unexported fields
}

Cloudtrailbeat configuration.

func (*Cloudtrailbeat) Run

func (bt *Cloudtrailbeat) Run(b *beat.Beat) error

Run starts cloudtrailbeat.

func (*Cloudtrailbeat) Stop

func (bt *Cloudtrailbeat) Stop()

Stop stops cloudtrailbeat.