duologs

Documentation

Index

• Constants
• func LogTypes() logtypes.Group
• type AccessDevice
• type AdministratorLog
• type Application
• type AuthDevice
• type AuthenticationLog
• type Description
• type Location
• type OfflineEnrollmentLog
• type TelephonyLog
• type User

Constants

const TypeAdministrator = "Duo.Administrator"

const TypeAuthentication = "Duo.Authentication"

const TypeOfflineEnrollment = "Duo.OfflineEnrollment"

const TypeTelephony = "Duo.Telephony"

Functions

func LogTypes

func LogTypes() logtypes.Group

Types

type AccessDevice

type AccessDevice struct {
	Browser        pantherlog.String `json:"browser" description:"The web browser used for access."`
	BrowserVersion pantherlog.String `json:"browser_version" description:"The browser version."`
	FlashVersion   pantherlog.String `json:"flash_version" description:"The Flash plugin version used, if present, otherwise \"uninstalled\"."`
	Hostname       pantherlog.String `json:"hostname" panther:"hostname" description:"The hostname, if present, otherwise \"null\"."`
	IP             pantherlog.String `json:"ip" panther:"ip" description:"The access device's IP address, if present, otherwise \"null\"."`
	//TODO: These fields are declared bool, but their description contradicts. Fix them when we hear back from Duo.
	IsEncryptionEnabled pantherlog.String   `` /* 162-byte string literal not displayed */
	IsFirewallEnabled   pantherlog.String   `` /* 153-byte string literal not displayed */
	IsPasswordSet       pantherlog.String   `` /* 156-byte string literal not displayed */
	JavaVersion         pantherlog.String   `json:"java_version" description:"The Java plugin version used, if present, otherwise \"uninstalled\"."`
	Location            *Location           `` /* 138-byte string literal not displayed */
	OS                  pantherlog.String   `json:"os" description:"The device operating system name."`
	OSVersion           pantherlog.String   `json:"os_version" description:"The device operating system version."`
	SecurityAgents      []pantherlog.String `` /* 130-byte string literal not displayed */
}

nolint:lll

type AdministratorLog

type AdministratorLog struct {
	//TODO: This event has the same fields as OfflineEnrollmentLog. To distinguish them, we validate that Action below
	// doesn't contain the values that OfflineEnrollmentLog.Action can take. If, however, Duo adds a value to the
	// values OfflineEnrollmentLog.Action can take, these events will be misclassified until we update our schemas.
	Action       pantherlog.String `` /* 153-byte string literal not displayed */
	Description  pantherlog.String `json:"description" description:"String detailing what changed, either as free-form text or serialized JSON."`
	ISOTimestamp pantherlog.Time   `json:"isotimestamp" validate:"required" event_time:"true" tcodec:"rfc3339" description:"ISO8601 timestamp of the event."`
	Object       pantherlog.String `` /* 193-byte string literal not displayed */
	Timestamp    pantherlog.Time   `json:"timestamp" tcodec:"unix" description:"Unix timestamp of the event."`
	UserName     pantherlog.String `` /* 415-byte string literal not displayed */
}

nolint:lll

type Application

type Application struct {
	Key  pantherlog.String `json:"key" description:"The application's integration_key."`
	Name pantherlog.String `json:"name" description:"The application's name."`
}

nolint:lll

type AuthDevice

type AuthDevice struct {
	IP       pantherlog.String `json:"ip" panther:"ip" description:"The IP address of the authentication device."`
	Location *Location         `` /* 133-byte string literal not displayed */
	Name     pantherlog.String `json:"name" description:"The name of the authentication device."`
}

nolint:lll

type AuthenticationLog

type AuthenticationLog struct {
	AccessDevice *AccessDevice     `` /* 234-byte string literal not displayed */
	Alias        pantherlog.String `` /* 160-byte string literal not displayed */
	Application  *Application      `json:"application" description:"Information about the application accessed."`
	AuthDevice   *AuthDevice       `json:"auth_device" description:"Information about the device used to approve or deny authentication."`
	Email        pantherlog.String `json:"email" panther:"email" description:"The email address of the user, if known to Duo, otherwise none."`
	EventType    pantherlog.String `json:"event_type" description:"The type of activity logged. one of: \"authentication\" or \"enrollment\"."`
	Factor       pantherlog.String `` /* 312-byte string literal not displayed */
	ISOTimestamp pantherlog.Time   `json:"isotimestamp" validate:"required" event_time:"true" tcodec:"rfc3339" description:"ISO8601 timestamp of the event."`
	OODSoftware  pantherlog.String `` /* 260-byte string literal not displayed */
	Reason       pantherlog.String `` /* 1394-byte string literal not displayed */
	Result       pantherlog.String `` /* 128-byte string literal not displayed */
	Timestamp    pantherlog.Time   `json:"timestamp" tcodec:"unix" description:"Unix timestamp of the event."`
	TxID         pantherlog.String `json:"txid" validate:"required" panther:"trace_id" description:"The transaction ID of the event."`
	User         User              `json:"user" description:"Information about the authenticating user."`
}

nolint:lll

type Description

type Description struct {
	UserAgent pantherlog.String `` /* 138-byte string literal not displayed */
	HostName  pantherlog.String `json:"hostname" description:" The host name of the system where Duo Windows Logon is installed."`
	Factor    pantherlog.String `json:"factor" description:" The type of authenticator used for offline access. One of \"duo_otp\" or \"security_key\"."`
}

nolint:lll

type Location

type Location struct {
	City    pantherlog.String `json:"city" description:"The city name."`
	Country pantherlog.String `json:"country" description:"The country code."`
	State   pantherlog.String `json:"state" description:"The state, county, province, or prefecture."`
}

nolint:lll

type OfflineEnrollmentLog

type OfflineEnrollmentLog struct {
	Action       pantherlog.String `` /* 237-byte string literal not displayed */
	Description  pantherlog.String `json:"description" description:"Information about the Duo Windows Logon client system as reported by the application."`
	ISOTimestamp pantherlog.Time   `json:"isotimestamp" validate:"required" event_time:"true" tcodec:"rfc3339" description:"ISO8601 timestamp of the event."`
	Object       pantherlog.String `json:"object" validate:"required" description:"The Duo Windows Logon integration's name."`
	Timestamp    pantherlog.Time   `json:"timestamp" tcodec:"unix" description:"Unix timestamp of the event."`
	UserName     pantherlog.String `json:"username" panther:"username" validate:"required" description:"The Duo username."`
}

nolint:lll

type TelephonyLog

type TelephonyLog struct {
	Context      pantherlog.String `` /* 152-byte string literal not displayed */
	Credits      pantherlog.Int32  `json:"credits" description:"How many telephony credits this event cost."`
	ISOTimestamp pantherlog.Time   `json:"isotimestamp" validate:"required" event_time:"true" tcodec:"rfc3339" description:"ISO8601 timestamp of the event."`
	Phone        pantherlog.String `json:"phone" validate:"required" description:"The phone number that initiated this event."`
	Timestamp    pantherlog.Time   `json:"timestamp" tcodec:"unix" description:"Unix timestamp of the event."`
	Type         pantherlog.String `json:"type" validate:"required" description:" The event type. Either \"sms\" or \"phone\"."`
}

nolint:lll

type User

type User struct {
	Groups []pantherlog.String `json:"groups" description:"Duo group membership information for the user."`
	Key    pantherlog.String   `json:"key" description:"The user's user_id."`
	Name   pantherlog.String   `json:"name" panther:"username" description:"The user's username."`
}

nolint:lll