import "github.com/elastic/beats/libbeat/processors"
conditionals.go config.go namespace.go processor.go registry.go
fields that should be always exported
Close closes a processor if it implements the Closer interface
func NewConditionList(config []conditions.Config) ([]conditions.Condition, error)
NewConditionList takes a slice of Config objects and turns them into real Condition objects.
func Plugin(name string, c Constructor) map[string][]interface{}
func RegisterPlugin(name string, constructor Constructor)
Closer defines the interface for processors that should be closed after using them. Close() is not part of the Processor interface because implementing this method is also a way to indicate that the processor keeps some resource that needs to be released or orderly closed.
func NewConditional( ruleFactory Constructor, ) Constructor
NewConditional returns a constructor suitable for registering when conditionals as a plugin.
type IfThenElseProcessor struct {
// contains filtered or unexported fields
}
IfThenElseProcessor executes one set of processors (then) if the condition is true and another set of processors (else) if the condition is false.
func NewIfElseThenProcessor(cfg *common.Config) (*IfThenElseProcessor, error)
NewIfElseThenProcessor construct a new IfThenElseProcessor.
Run checks the if condition and executes the processors attached to the then statement or the else statement based on the condition.
func (p *IfThenElseProcessor) String() string
type Namespace struct {
// contains filtered or unexported fields
}
func (ns *Namespace) Constructors() map[string]Constructor
Constructors returns all registered processor constructors and its names.
func (ns *Namespace) Plugin() Constructor
func (ns *Namespace) Register(name string, factory Constructor) error
PluginConfig represents the list of processors.
Processor is the interface that all processors must implement
NewConditionRule returns a processor that will execute the provided processor if the condition is true.
Processors is
func New(config PluginConfig) (*Processors, error)
New creates a list of processors from a list of free user configurations.
func NewList(log *logp.Logger) *Processors
NewList creates a new empty processor list. Additional processors can be added to the List field.
func (procs *Processors) AddProcessor(p Processor)
AddProcessor adds a single Processor to Processors
func (procs *Processors) AddProcessors(p Processors)
AddProcessors adds more Processors to Processors
func (procs *Processors) All() []beat.Processor
func (procs *Processors) Close() error
Run executes the all processors serially and returns the event and possibly an error. If the event has been dropped (canceled) by a processor in the list then a nil event is returned.
RunBC (run backwards-compatible) applies the processors, by providing the old interface based on common.MapStr. The event us temporarily converted to beat.Event. By this 'conversion' the '@timestamp' field can not be accessed by processors. Note: this method will be removed, when the publisher pipeline BC-API is to
be removed.
func (procs Processors) String() string
type WhenProcessor struct {
// contains filtered or unexported fields
}
WhenProcessor is a tuple of condition plus a Processor.
Run executes this WhenProcessor.
func (r *WhenProcessor) String() string
Path | Synopsis |
---|---|
actions | |
add_cloud_metadata | |
add_docker_metadata | |
add_formatted_index | |
add_host_metadata | |
add_id | |
add_id/generator | |
add_kubernetes_metadata | |
add_locale | |
add_observer_metadata | |
add_process_metadata | |
checks | |
communityid | |
convert | |
decode_csv_fields | |
dissect | |
dns | Package dns implements a processor that can perform DNS lookups by sending a DNS request over UDP to a recursive nameserver. |
extract_array | |
fingerprint | |
ratelimit | |
registered_domain | |
script | |
script/javascript | |
script/javascript/module | |
script/javascript/module/console | |
script/javascript/module/net | |
script/javascript/module/path | |
script/javascript/module/processor | |
script/javascript/module/require | |
timeseries | |
timestamp | |
translate_sid | Package translate_sid provides a Beat processor for converting Windows security identifiers (SIDs) to account names. |
urldecode | |
util |
Package processors imports 10 packages (graph) and is imported by 1163 packages. Updated 2021-01-27. Refresh now. Tools for package owners.