Documentation
¶
Overview ¶
Package datadog matches expected Datadog security signals.
Index ¶
- Constants
- type DatadogAlertFilter
- type DatadogAlertGeneratedAssertion
- func (m *DatadogAlertGeneratedAssertion) AlertName() string
- func (m *DatadogAlertGeneratedAssertion) Cleanup(indicators []string, logger *logrus.Entry) error
- func (m *DatadogAlertGeneratedAssertion) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)
- func (m *DatadogAlertGeneratedAssertion) MatcherName() string
- func (m *DatadogAlertGeneratedAssertion) String() string
- type DatadogAlertGeneratedAssertionBuilder
- func (m *DatadogAlertGeneratedAssertionBuilder) Cleanup(indicators []string, logger *logrus.Entry) error
- func (m *DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)
- func (m *DatadogAlertGeneratedAssertionBuilder) WithSeverity(severity string) *DatadogAlertGeneratedAssertionBuilder
- type DatadogSecuritySignalsAPI
- type DatadogSecuritySignalsAPIImpl
Constants ¶
View Source
const QueryAllOpenSignals = `@workflow.triage.state:open`
View Source
const QueryOpenSignalsByAlertNameAndSeverity = `@workflow.triage.state:open @workflow.rule.name:"%s" %s`
View Source
const QuerySeverity = `status:%s`
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type DatadogAlertFilter ¶
type DatadogAlertGeneratedAssertion ¶
type DatadogAlertGeneratedAssertion struct {
SignalsAPI DatadogSecuritySignalsAPI
AlertFilter *DatadogAlertFilter
}
func (*DatadogAlertGeneratedAssertion) AlertName ¶
func (m *DatadogAlertGeneratedAssertion) AlertName() string
func (*DatadogAlertGeneratedAssertion) Cleanup ¶
func (m *DatadogAlertGeneratedAssertion) Cleanup(indicators []string, logger *logrus.Entry) error
func (*DatadogAlertGeneratedAssertion) HasExpectedAlert ¶
func (*DatadogAlertGeneratedAssertion) MatcherName ¶
func (m *DatadogAlertGeneratedAssertion) MatcherName() string
func (*DatadogAlertGeneratedAssertion) String ¶
func (m *DatadogAlertGeneratedAssertion) String() string
type DatadogAlertGeneratedAssertionBuilder ¶
type DatadogAlertGeneratedAssertionBuilder struct {
DatadogAlertGeneratedAssertion
}
builder
func DatadogSecuritySignal ¶
func DatadogSecuritySignal(name string, envVars map[string]string) *DatadogAlertGeneratedAssertionBuilder
DatadogSecuritySignal creates a new Datadog security signal matcher. envVars provides run-specific env vars; pass nil to read from process env (CLI path).
func (*DatadogAlertGeneratedAssertionBuilder) Cleanup ¶
func (m *DatadogAlertGeneratedAssertionBuilder) Cleanup(indicators []string, logger *logrus.Entry) error
func (*DatadogAlertGeneratedAssertionBuilder) HasExpectedAlert ¶
func (*DatadogAlertGeneratedAssertionBuilder) WithSeverity ¶
func (m *DatadogAlertGeneratedAssertionBuilder) WithSeverity(severity string) *DatadogAlertGeneratedAssertionBuilder
type DatadogSecuritySignalsAPIImpl ¶
type DatadogSecuritySignalsAPIImpl struct {
// contains filtered or unexported fields
}
func (*DatadogSecuritySignalsAPIImpl) CloseSignal ¶
func (m *DatadogSecuritySignalsAPIImpl) CloseSignal(id string) error
func (*DatadogSecuritySignalsAPIImpl) SearchSignals ¶
func (m *DatadogSecuritySignalsAPIImpl) SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)
Click to show internal directories.
Click to hide internal directories.