Help us shape the future of Go! Take the 2026 Go Developer Survey

ruleadapters

package
v0.3.310 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 3, 2026 License: Apache-2.0 Imports: 21 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

View Source
var ErrRuleShouldNotBeAlerted = errors.New("rule should not be alerted")

Functions

This section is empty.

Types

type EventMetadataSetter

type EventMetadataSetter interface {
	SetFailureMetadata(failure types.RuleFailure, enrichedEvent *events.EnrichedEvent, state map[string]any)
}

type EventRuleAdapter

type EventRuleAdapter interface {
	SetFailureMetadata(failure types.RuleFailure, enrichedEvent *events.EnrichedEvent, state map[string]any)
}

type EventRuleAdapterFactory

type EventRuleAdapterFactory struct {
	// contains filtered or unexported fields
}

func NewEventRuleAdapterFactory

func NewEventRuleAdapterFactory() *EventRuleAdapterFactory

func (*EventRuleAdapterFactory) GetAdapter

func (f *EventRuleAdapterFactory) GetAdapter(eventType utils.EventType) (EventRuleAdapter, bool)

func (*EventRuleAdapterFactory) RegisterAdapter

func (f *EventRuleAdapterFactory) RegisterAdapter(eventType utils.EventType, adapter EventRuleAdapter)

type FileHashCache

type FileHashCache struct {
	SHA1Hash string
	MD5Hash  string
}

type RuleFailureCreator

type RuleFailureCreator struct {
	// contains filtered or unexported fields
}

func NewRuleFailureCreator

func NewRuleFailureCreator(enricher types.Enricher, dnsManager dnsmanager.DNSResolver, adapterFactory *EventRuleAdapterFactory, alertPlatform armotypes.AlertSourcePlatform, agentVersion string, containerIdToPid *maps.SafeMap[string, uint32]) *RuleFailureCreator

func (*RuleFailureCreator) CreateRuleFailure

func (r *RuleFailureCreator) CreateRuleFailure(rule typesv1.Rule, enrichedEvent *events.EnrichedEvent, objectCache objectcache.ObjectCache, message, uniqueID, apChecksum string, state map[string]any) types.RuleFailure

type RuleFailureCreatorInterface

type RuleFailureCreatorInterface interface {
	CreateRuleFailure(rule typesv1.Rule, enrichedEvent *events.EnrichedEvent, objectCache objectcache.ObjectCache, message, uniqueID, apChecksum string, state map[string]any) types.RuleFailure
}

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL