auditlog

Documentation

Overview

auditlog package processes the /var/log/audit/audit.log log file. Process records the stream of text and on newline sends the line of text to the AuditLogChan for received by the auditd processor for correlation and analysis.

Index

• type AuditLogIngester
  • func NewAuditLogIngester(filePath string, auditLogChan chan string, ...) AuditLogIngester
  • func (a *AuditLogIngester) Ingest(ctx context.Context) error
  • func (a *AuditLogIngester) Process(ctx context.Context, line string) error

Types

type AuditLogIngester

type AuditLogIngester struct {
	FilePath     string
	AuditLogChan chan string
	// contains filtered or unexported fields
}

func NewAuditLogIngester

func NewAuditLogIngester(
	filePath string,
	auditLogChan chan string,
	namedPipeIngester namedpipe.NamedPipeIngester,
) AuditLogIngester

func (*AuditLogIngester) Ingest

func (a *AuditLogIngester) Ingest(ctx context.Context) error

func (*AuditLogIngester) Process

func (a *AuditLogIngester) Process(ctx context.Context, line string) error