publisher

type ALBEventParser struct {
	// contains filtered or unexported fields
}

type CloudFrontEventParser struct {
	// contains filtered or unexported fields
}

type CloudTrailEventParser struct {
	// contains filtered or unexported fields
}

type CloudTrailRecord struct {
	UserIdentity      CloudTrailUserIdentity `json:"userIdentity"`
	EventTime         string                 `json:"eventTime"`
	EventSource       string                 `json:"eventSource"`
	EventName         string                 `json:"eventName"`
	AwsRegion         string                 `json:"awsRegion"`
	SourceIPAddress   string                 `json:"sourceIPAddress"`
	UserAgent         string                 `json:"userAgent"`
	Resources         []CloudTrailResource   `json:"resources"`
	EventType         string                 `json:"eventType"`
	RequestParameters map[string]interface{} `json:"requestParameters"`
}

type CloudTrailRecords struct {
	Records []CloudTrailRecord `json:"Records"`
}

type CloudTrailResource struct {
	ResourceARN       string `json:"ARN"`
	ResourceAccountId string `json:"accountId"`
}

type CloudTrailUserIdentity struct {
	Type        string `json:"type"`
	PrincipleId string `json:"principleId"`
	ARN         string `json:"arn"`
	AccountId   string `json:"accountId"`
	AccessKeyId string `json:"accessKeyId"`
}

type ELBEventParser struct {
	// contains filtered or unexported fields
}

type EventParser interface {
	// ParseEvents runs in a background goroutine and parses the downloaded
	// object, sending the events parsed from it further down the pipeline
	// using the output channel. er
	ParseEvents(obj state.DownloadedObject, out chan<- event.Event) error

	// DynSample dynamically samples events, reading them from `eventsCh`
	// and sending them to `sampledCh`. Behavior is dependent on the
	// publisher implementation, e.g., some fields might matter more for
	// ELB than for CloudFront.
	DynSample(in <-chan event.Event, out chan<- event.Event)
}

type HoneycombPublisher struct {
	state.Stater
	EventParser
	APIHost         string
	SampleRate      int
	FinishedObjects chan string
	// contains filtered or unexported fields
}

type Publisher interface {
	// Publish accepts an io.Reader and scans it line-by-line, parses the
	// relevant event from each line (using EventParser), and sends to the
	// target (Honeycomb).
	Publish(f state.DownloadedObject) error
}