exporters

type AlertBulkManager struct {
	sync.RWMutex
	// contains filtered or unexported fields
}

type AlertManagerExporter struct {
	Host     string
	NodeName string
	// contains filtered or unexported fields
}

type AlertType string

type CsvExporter struct {
	CsvRulePath    string
	CsvMalwarePath string
}

type Exporter interface {
	// SendRuleAlert sends an alert on failed rule to the exporter
	SendRuleAlert(failedRule types.RuleFailure)
	// SendMalwareAlert sends an alert on malware detection to the exporter.
	SendMalwareAlert(malwareResult malwaremanager.MalwareResult)
	// SendFimAlert sends an alert on FIM detection to the exporter.
	SendFimAlerts(fimEvents []hostfimsensor.FimEvent)
}

type ExporterBus struct {
	// contains filtered or unexported fields
}

type ExporterMock struct{}

type ExportersConfig struct {
	StdoutExporter           *bool               `mapstructure:"stdoutExporter"`
	HTTPExporterConfig       *HTTPExporterConfig `mapstructure:"httpExporterConfig"`
	SyslogExporter           string              `mapstructure:"syslogExporterURL"`
	CsvRuleExporterPath      string              `mapstructure:"CsvRuleExporterPath"`
	CsvMalwareExporterPath   string              `mapstructure:"CsvMalwareExporterPath"`
	AlertManagerExporterUrls []string            `mapstructure:"alertManagerExporterUrls"`
}

type FimEvent struct {
	EventType hostfimsensor.FimEventType `json:"eventType"`
	Path      string                     `json:"path"`
	FileHash  string                     `json:"fileHash"`
	Timestamp time.Time                  `json:"timestamp"`
	Uid       uint32                     `json:"uid"`
	Gid       uint32                     `json:"gid"`
	Mode      uint32                     `json:"mode"`

	// Enhanced fields for richer event context
	FileSize    int64     `json:"fileSize"`
	FileInode   uint64    `json:"fileInode"`
	FileDevice  uint64    `json:"fileDevice"`
	FileMtime   time.Time `json:"fileMtime"`
	FileCtime   time.Time `json:"fileCtime"`
	ProcessPid  uint32    `json:"processPid"`
	ProcessName string    `json:"processName"`
	ProcessArgs []string  `json:"processArgs"`
	HostName    string    `json:"hostName"`
	AgentId     string    `json:"agentId"`
}

type FimEventReport struct {
	Events      []FimEvent `json:"events"`
	Host        string     `json:"host"`
	NodeName    string     `json:"nodeName"`
	ClusterName string     `json:"clusterName"`
	ReportedBy  string     `json:"reportedBy"`
	Timestamp   time.Time  `json:"timestamp"`
}

type HTTPAlertsList struct {
	Kind       string             `json:"kind"`
	APIVersion string             `json:"apiVersion"`
	Metadata   apitypes.Metadata  `json:"metadata"`
	Spec       HTTPAlertsListSpec `json:"spec"`
}

type HTTPAlertsListSpec struct {
	Alerts        []apitypes.RuntimeAlert `json:"alerts"`
	ProcessTree   apitypes.ProcessTree    `json:"processTree"`
	CloudMetadata apitypes.CloudMetadata  `json:"cloudMetadata"`
}

type HTTPExporter struct {
	// contains filtered or unexported fields
}

type HTTPExporterConfig struct {
	URL                string          `json:"url"`
	Path               *string         `json:"path,omitempty"`
	QueryParams        []HTTPKeyValues `json:"queryParams,omitempty"`
	Headers            []HTTPKeyValues `json:"headers"`
	TimeoutSeconds     int             `json:"timeoutSeconds"`
	Method             string          `json:"method"`
	MaxAlertsPerMinute int             `json:"maxAlertsPerMinute"`
	// Alert bulking configuration
	EnableAlertBulking bool `json:"enableAlertBulking"`
	BulkMaxAlerts      int  `json:"bulkMaxAlerts"`
	BulkTimeoutSeconds int  `json:"bulkTimeoutSeconds"`
	// Send queue configuration
	BulkSendQueueSize    int `json:"bulkSendQueueSize"`    // Default: 1000
	BulkMaxRetries       int `json:"bulkMaxRetries"`       // Default: 3
	BulkRetryBaseDelayMs int `json:"bulkRetryBaseDelayMs"` // Default: 1000ms
	BulkRetryMaxDelayMs  int `json:"bulkRetryMaxDelayMs"`  // Default: 30000ms
}

type HTTPKeyValues struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type StdoutExporter struct {
	// contains filtered or unexported fields
}

type SyslogExporter struct {
	// contains filtered or unexported fields
}