datadog

package
v0.4.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jun 25, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Overview

Package datadog matches expected Datadog security signals.

Index

Constants

View Source 
const QueryAllOpenSignals = `@workflow.triage.state:open`
View Source 
const QueryOpenSignalsByAlertNameAndSeverity = `@workflow.triage.state:open @workflow.rule.name:"%s" %s`
View Source 
const QuerySeverity = `status:%s`

Variables

This section is empty.

Functions

This section is empty.

Types

type DatadogAlertFilter 

type DatadogAlertFilter struct {
	RuleName string `yaml:"rule-name"`
	Severity string
}

type DatadogAlertMatcher added in v0.4.0 

type DatadogAlertMatcher struct {
	SignalsAPI  DatadogSecuritySignalsAPI
	AlertFilter *DatadogAlertFilter
}

func (*DatadogAlertMatcher) AlertName added in v0.4.0 

func (m *DatadogAlertMatcher) AlertName() string

func (*DatadogAlertMatcher) Cleanup added in v0.4.0 

func (m *DatadogAlertMatcher) Cleanup(indicators []string, logger *logrus.Entry) error

func (*DatadogAlertMatcher) HasExpectedAlert added in v0.4.0 

func (m *DatadogAlertMatcher) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)

func (*DatadogAlertMatcher) MatcherName added in v0.4.0 

func (m *DatadogAlertMatcher) MatcherName() string

func (*DatadogAlertMatcher) String added in v0.4.0 

func (m *DatadogAlertMatcher) String() string

type DatadogAlertMatcherBuilder added in v0.4.0 

type DatadogAlertMatcherBuilder struct {
	DatadogAlertMatcher
}

builder

func DatadogSecuritySignal 

func DatadogSecuritySignal(name string, envVars map[string]string) *DatadogAlertMatcherBuilder

DatadogSecuritySignal creates a new Datadog security signal matcher. envVars provides run-specific env vars; pass nil to read from process env (CLI path).

func (*DatadogAlertMatcherBuilder) Cleanup added in v0.4.0 

func (m *DatadogAlertMatcherBuilder) Cleanup(indicators []string, logger *logrus.Entry) error

func (*DatadogAlertMatcherBuilder) HasExpectedAlert added in v0.4.0 

func (m *DatadogAlertMatcherBuilder) HasExpectedAlert(indicators []string, logger *logrus.Entry) (bool, error)

func (*DatadogAlertMatcherBuilder) WithSeverity added in v0.4.0 

func (m *DatadogAlertMatcherBuilder) WithSeverity(severity string) *DatadogAlertMatcherBuilder

type DatadogSecuritySignalsAPI 

type DatadogSecuritySignalsAPI interface {
	SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)
	CloseSignal(id string) error
}

type DatadogSecuritySignalsAPIImpl 

type DatadogSecuritySignalsAPIImpl struct {
	// contains filtered or unexported fields
}

func (*DatadogSecuritySignalsAPIImpl) CloseSignal 

func (m *DatadogSecuritySignalsAPIImpl) CloseSignal(id string) error

func (*DatadogSecuritySignalsAPIImpl) SearchSignals 

func (m *DatadogSecuritySignalsAPIImpl) SearchSignals(query string) ([]datadogV2.SecurityMonitoringSignal, error)

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.