Documentation
¶
Overview ¶
Package normalize canonicalizes NormalizedEvent fields so downstream stages (dedup, aggregate) operate on stable, comparable values.
Canonicalization is intentionally narrow:
- IPv6 addresses are lowercased and ::ffff:v4 is unwrapped to v4.
- Usernames are split into Username + Domain when "@" is present.
- Empty strings stay empty (no synthetic placeholders).
No DNS lookups. No remote enrichment. No state. The package is pure-function and stdlib-only.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Canonicalize ¶
func Canonicalize(e event.NormalizedEvent) event.NormalizedEvent
Canonicalize returns a new NormalizedEvent with canonical IP and identity fields. The input is not mutated.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.