events

package
v0.3.3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 18, 2025 License: Apache-2.0 Imports: 4 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type EnrichedEvent added in v0.2.354

type EnrichedEvent struct {
	Event       utils.K8sEvent
	Timestamp   time.Time
	ContainerID string
	ProcessTree apitypes.Process
	PID         uint32
	PPID        uint32
}

func NewEnrichedEvent added in v0.2.354

func NewEnrichedEvent(event utils.K8sEvent, timestamp time.Time, containerID string, processTree apitypes.Process) *EnrichedEvent

NewEnrichedEvent creates a new enriched event

type ProcfsEvent added in v0.2.354

type ProcfsEvent struct {
	Type           types.EventType `json:"type"`
	Timestamp      types.Time      `json:"timestamp"`
	PID            uint32          `json:"pid"`
	PPID           uint32          `json:"ppid"`
	Comm           string          `json:"comm"`
	Pcomm          string          `json:"pcomm"`
	Cmdline        string          `json:"cmdline"`
	Uid            *uint32         `json:"uid"`
	Gid            *uint32         `json:"gid"`
	Cwd            string          `json:"cwd"`
	Path           string          `json:"path"`
	StartTimeNs    uint64          `json:"start_time_ns"`
	ContainerID    string          `json:"container_id"`
	ContainerMntNs uint64          `json:"container_mnt_ns"`
	ContainerNetNs uint64          `json:"container_net_ns"`
	HostPID        int             `json:"host_pid"`
	HostPPID       int             `json:"host_ppid"`
}

ProcfsEvent represents a procfs event that can be processed by the ordered event queue

func (*ProcfsEvent) GetContainerID added in v0.3.3

func (pe *ProcfsEvent) GetContainerID() string

func (*ProcfsEvent) GetEventType added in v0.3.3

func (pe *ProcfsEvent) GetEventType() utils.EventType

func (*ProcfsEvent) GetNamespace added in v0.2.354

func (pe *ProcfsEvent) GetNamespace() string

GetNamespace returns the namespace (empty for procfs events)

func (*ProcfsEvent) GetPod added in v0.2.354

func (pe *ProcfsEvent) GetPod() string

GetPod returns the pod name (empty for procfs events)

func (*ProcfsEvent) GetTimestamp added in v0.2.354

func (pe *ProcfsEvent) GetTimestamp() types.Time

GetTimestamp returns the event timestamp

func (*ProcfsEvent) GetType added in v0.2.354

func (pe *ProcfsEvent) GetType() types.EventType

GetEventType returns the event type

func (*ProcfsEvent) HasDroppedEvents added in v0.3.3

func (pe *ProcfsEvent) HasDroppedEvents() bool

func (*ProcfsEvent) Release added in v0.3.3

func (pe *ProcfsEvent) Release()

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL