forwarder

Documentation

Index

• func Handle(oldAlertDedupEvent, newAlertDedupEvent *AlertDedupEvent) error
• func Setup()
• type Alert
• type AlertDedupEvent
  • func FromDynamodDBAttribute(input map[string]events.DynamoDBAttributeValue) (event *AlertDedupEvent, err error)

Functions

func Handle

func Handle(oldAlertDedupEvent, newAlertDedupEvent *AlertDedupEvent) error

func Setup

func Setup()

Setup parses the environment and builds the AWS and http clients.

Types

type Alert

type Alert struct {
	ID              string  `dynamodbav:"id,string"`
	TimePartition   string  `dynamodbav:"timePartition,string"`
	Severity        string  `dynamodbav:"severity,string"`
	RuleDisplayName *string `dynamodbav:"ruleDisplayName,string"`
	Title           string  `dynamodbav:"title,string"` // The alert title. It will be the Python-generated title or a default one if
	// no Python-generated title is available.
	AlertDedupEvent
}

Alert contains all the fields associated to the alert stored in DDB

type AlertDedupEvent

type AlertDedupEvent struct {
	RuleID              string    `dynamodbav:"ruleId,string"`
	RuleVersion         string    `dynamodbav:"ruleVersion,string"`
	DeduplicationString string    `dynamodbav:"dedup,string"`
	CreationTime        time.Time `dynamodbav:"creationTime,string"`
	UpdateTime          time.Time `dynamodbav:"updateTime,string"`
	EventCount          int64     `dynamodbav:"eventCount,number"`
	LogTypes            []string  `dynamodbav:"logTypes,stringset"`
	GeneratedTitle      *string   `dynamodbav:"-"` // The title that was generated dynamically using Python. Might be null.
	AlertCount          int64     `dynamodbav:"-"` // There is no need to store this item in DDB
}

AlertDedupEvent represents the event stored in the alert dedup DDB table by the rules engine

func FromDynamodDBAttribute

func FromDynamodDBAttribute(input map[string]events.DynamoDBAttributeValue) (event *AlertDedupEvent, err error)