beater

package
v0.0.0-...-2c791d3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 23, 2017 License: Apache-2.0 Imports: 15 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func New

func New(b *beat.Beat, cfg *common.Config) (beat.Beater, error)

New creates beater

Types

type BroField

type BroField struct {
	Name  string `json:"name"`
	Type  string `json:"type"`
	Value string `json:"value"`
}

BroField log line field

type BroHeaderFields

type BroHeaderFields struct {
	Separator    string   `json:"separator,omitempty"`
	SetSeparator string   `json:"set_separator,omitempty"`
	EmptyField   string   `json:"empty_field,omitempty"`
	UnsetField   string   `json:"unset_field,omitempty"`
	Path         string   `json:"path,omitempty"`
	Open         string   `json:"open,omitempty"`
	Fields       []string `json:"fields"`
	Types        []string `json:"types"`
}

BroHeaderFields log file header

func ReadHeader

func ReadHeader(filePath string) BroHeaderFields

ReadHeader parses the bro log header

type BroLogLine

type BroLogLine struct {
	Type         string     `json:"type,omitempty"`
	Created      string     `json:"created,omitempty"`
	SetSeparator string     `json:"set_separator,omitempty"`
	EmptyField   string     `json:"empty_field,omitempty"`
	UnsetField   string     `json:"unset_field,omitempty"`
	Fields       []BroField `json:"fields,omitempty"`
}

BroLogLine log entry

type BroLogs

type BroLogs struct {
	Logs []BroLogLine `json:"logs,omitempty"`
}

BroLogs is an array of BroLogLines

func ParseLogFile

func ParseLogFile(filePath string) BroLogs

ParseLogFile parses out a bro log file

type Brobeat

type Brobeat struct {
	// contains filtered or unexported fields
}

Brobeat beat struct

func (*Brobeat) Run

func (bt *Brobeat) Run(b *beat.Beat) error

Run start beater

func (*Brobeat) Stop

func (bt *Brobeat) Stop()

Stop stops beater

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL