event

Documentation

Index

• Constants
• type Data
• type Event
• type Reporter
  • func NewReporter(logSource *config.LogSource, logChan chan *message.Message) Reporter

Constants

const (
	// Passed is used to report successful result of a rule check (condition passed)
	Passed = "passed"
	// Failed is used to report unsuccessful result of a rule check (condition failed)
	Failed = "failed"
	// Error is used to report result of a rule check that resulted in an error (unable to evaluate condition)
	Error = "error"
)

Types

type Data

type Data map[string]interface{}

Data defines a key value map for storing attributes of a reported rule event

type Event

type Event struct {
	AgentRuleID      string      `json:"agentRuleId,omitempty"`
	AgentRuleVersion int         `json:"agentRuleVersion,omitempty"`
	Result           string      `json:"result,omitempty"`
	ResourceType     string      `json:"resourceType,omitempty"`
	ResourceID       string      `json:"resourceId,omitempty"`
	Tags             []string    `json:"tags"`
	Data             interface{} `json:"data,omitempty"`
}

Event describes a log event sent for an evaluated compliance/security rule.

type Reporter

type Reporter interface {
	Report(event *Event)
	ReportRaw(content []byte, tags ...string)
}

Reporter defines an interface for reporting rule events

func NewReporter

func NewReporter(logSource *config.LogSource, logChan chan *message.Message) Reporter

NewReporter returns an instance of Reporter