Documentation
¶
Overview ¶
Package elastic is a minimal client for the Elastic Security detection-engine API, used to validate Elastic connectors.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
Client provides Elastic Security API operations.
func NewClient ¶
func NewClient(config ClientConfig) *Client
NewClient creates a new Elastic integration client.
type ClientConfig ¶
ClientConfig holds Elastic connection configuration.
type ListRulesResponse ¶
type ListRulesResponse struct {
Page int `json:"page"`
PerPage int `json:"perPage"`
Total int `json:"total"`
Data []RuleSummary `json:"data"`
}
ListRulesResponse is the response from the Kibana Detection Engine _find API.
type RuleSummary ¶
type RuleSummary struct {
ID string `json:"id"`
RuleID string `json:"rule_id"`
Name string `json:"name"`
Description string `json:"description"`
Enabled bool `json:"enabled"`
Tags []string `json:"tags"`
Severity string `json:"severity"`
RiskScore int `json:"risk_score"`
Type string `json:"type"`
CreatedAt string `json:"created_at"`
UpdatedAt string `json:"updated_at"`
}
RuleSummary represents a detection rule from Elastic Security.
Click to show internal directories.
Click to hide internal directories.