audit

package
v0.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: May 19, 2018 License: Apache-2.0 Imports: 13 Imported by: 2

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type EnrichedEvent

type EnrichedEvent struct {
	types.Event
	GeoIPLookup *geoip.City
	ASNLookup   *geoip.ASN
}

EnrichedEvent is an event that has been annotated additional context

func (*EnrichedEvent) GetMessage

func (e *EnrichedEvent) GetMessage(ruleID int) *types.Message

GetMessage returns the message generated by the specified rule ID, or nil if no message was generated for this event.

func (*EnrichedEvent) RequestHeaders

func (e *EnrichedEvent) RequestHeaders() http.Header

RequestHeaders returns the request headers from this event as an http.Header map

type Handler

type Handler interface {
	Handle(*EnrichedEvent) error
}

Handler for a ModSecurity audit event

func NewLoggerHandler

func NewLoggerHandler(logger *logrus.Logger) Handler

NewLoggerHandler creates an audit event handler that logs via the logrus log stream

func NewMetricsHandler

func NewMetricsHandler(registry prometheus.Registerer, namespace string) (Handler, error)

NewMetricsHandler creates a PrometheusAuditMetrics with the specified registry and namespace

type Server

type Server interface {
	URL() string
	AddHandler(Handler)
}

Server is a localhost ModSecurity audit event receiver

func StartServer

func StartServer() (Server, error)

StartServer starts a ModSecurity audit event receiver (in a goroutine)

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL