twsdk

Jan 3, 2025

Changes in this version

type Topic

+ const TopicAnalysisFailure

+ const TopicCelEvaluationFailure

+ const TopicCorrelationFailure

+ const TopicEnqueueFailure

+ const TopicEnqueueSuccess

+ const TopicIntegrationFailure

+ const TopicOutgoingRequestFailure

+ const TopicParsingFailure

Dec 19, 2024

Changes in this version

type SdkError

+ Cause *string

+ Msg string

Dec 19, 2024

Changes in this version

+ func SanitizeField(s *string)

Dec 18, 2024

Changes in this version

type SdkError

+ func ToSdkError(err error) *SdkError

Dec 18, 2024

Changes in this version

type SdkError

+ Args map[string]interface{}

+ Code string

+ Trace []string

+ func FromError(err error) *SdkError

Dec 18, 2024

Changes in this version

+ type SdkError interface

+ Error func() string

+ GinError func(c *gin.Context)

Dec 18, 2024

Changes in this version

type ErrorObject

+ func (e ErrorObject) GinError(c *gin.Context)

Dec 18, 2024

Changes in this version

+ type Meter struct

+ Function string

+ Options MeterOptions

+ StartTime time.Time

+ func NewMeter(function string, options ...MeterOptions) *Meter

+ func (m *Meter) Elapsed(point string) time.Duration

+ func (m *Meter) Reset()

+ type MeterOptions struct

+ LogSlow bool

+ SlowThreshold time.Duration

Dec 17, 2024

Changes in this version

type ErrorObject

+ func (e ErrorObject) Error() string

Dec 12, 2024

Changes in this version

type DataProcessingMessage

+ Error interface{}

type ErrorObject

+ Code string

Dec 12, 2024

Changes in this version

+ func Error(err error, trace []string, args map[string]interface{}) error

+ func Trace() []string

+ type ErrorObject struct

+ Args map[string]interface{}

+ Message string

+ Trace []string

Dec 12, 2024

Changes in this version

+ func ValidateFilePath(path string) error

+ func ValidateReservedField(f string) error

Dec 4, 2024

Changes in this version

type Metter

+ func (m *Metter) Reset()

Dec 4, 2024

Changes in this version

+ type Metter struct

+ Function string

+ Options MetterOptions

+ StartTime time.Time

+ func NewMetter(function string, options ...MetterOptions) *Metter

+ func (m *Metter) Elapsed() time.Duration

+ type MetterOptions struct

+ LogSlow bool

+ SlowThreshold time.Duration

Dec 3, 2024

Changes in this version

type Env

+ Mode string

+ func (x *Env) GetMode() string

Nov 27, 2024

Changes in this version

type Draft

+ Step int32

+ func (x *Draft) GetStep() int32

Nov 27, 2024

Changes in this version

+ const Output_AlertOutput_FullMethodName

+ const Output_EventOutput_FullMethodName

+ var Output_ServiceDesc = grpc.ServiceDesc

+ func RegisterOutputServer(s grpc.ServiceRegistrar, srv OutputServer)

+ type Draft struct

+ Log string

+ Logs []string

+ func (*Draft) Descriptor() ([]byte, []int)

+ func (*Draft) ProtoMessage()

+ func (x *Draft) GetLog() string

+ func (x *Draft) GetLogs() []string

+ func (x *Draft) ProtoReflect() protoreflect.Message

+ func (x *Draft) Reset()

+ func (x *Draft) String() string

+ type Expand struct

+ Source string

+ To string

+ Where *Where

+ func (*Expand) Descriptor() ([]byte, []int)

+ func (*Expand) ProtoMessage()

+ func (x *Expand) GetSource() string

+ func (x *Expand) GetTo() string

+ func (x *Expand) GetWhere() *Where

+ func (x *Expand) ProtoReflect() protoreflect.Message

+ func (x *Expand) Reset()

+ func (x *Expand) String() string

+ type OutputClient interface

+ AlertOutput func(ctx context.Context, opts ...grpc.CallOption) (grpc.ClientStreamingClient[Alert, emptypb.Empty], error)

+ EventOutput func(ctx context.Context, opts ...grpc.CallOption) (grpc.ClientStreamingClient[Event, emptypb.Empty], error)

+ func NewOutputClient(cc grpc.ClientConnInterface) OutputClient

+ type OutputServer interface

+ AlertOutput func(grpc.ClientStreamingServer[Alert, emptypb.Empty]) error

+ EventOutput func(grpc.ClientStreamingServer[Event, emptypb.Empty]) error

+ type Output_AlertOutputClient = grpc.ClientStreamingClient[Alert, emptypb.Empty]

+ type Output_AlertOutputServer = grpc.ClientStreamingServer[Alert, emptypb.Empty]

+ type Output_EventOutputClient = grpc.ClientStreamingClient[Event, emptypb.Empty]

+ type Output_EventOutputServer = grpc.ClientStreamingServer[Event, emptypb.Empty]

type Step

+ Expand *Expand

+ func (x *Step) GetExpand() *Expand

type Transform

+ Draft *Draft

+ func (x *Transform) GetDraft() *Draft

+ type UnimplementedOutputServer struct

+ func (UnimplementedOutputServer) AlertOutput(grpc.ClientStreamingServer[Alert, emptypb.Empty]) error

+ func (UnimplementedOutputServer) EventOutput(grpc.ClientStreamingServer[Event, emptypb.Empty]) error

+ type UnsafeOutputServer interface

Nov 25, 2024

Changes in this version

type Event

+ Severity string

+ func (x *Event) GetSeverity() string

Nov 20, 2024

Changes in this version

type Event

+ Command string

+ Origin *Side

+ Target *Side

+ func (x *Event) GetCommand() string

+ func (x *Event) GetOrigin() *Side

+ func (x *Event) GetTarget() *Side

type Side

+ Hash string

+ TotalCpuUnits int64

+ TotalMem int64

+ func (x *Side) GetHash() string

+ func (x *Side) GetTotalCpuUnits() int64

+ func (x *Side) GetTotalMem() int64

Nov 15, 2024

Changes in this version

type Topic

+ const TOPIC_CEL_EVALATUAION_FAILURE

Nov 15, 2024

Changes in this version

+ func GetZero(t gjson.Type) any

Nov 15, 2024

Changes in this version

+ type Topic string

+ const TOPIC_OUTGOING_REQUEST_FAILURE

Nov 7, 2024

Changes in this version

+ const TOPIC_ANALYSIS_FAILURE

+ const TOPIC_CORRELATION_FAILURE

+ const TOPIC_PARSING_FAILURE

Nov 7, 2024

Changes in this version

+ const TOPIC_INTEGRATION_FAILURE

+ type DataProcessingMessage struct

+ Cause *string

+ DataSource string

+ DataType string

+ type IntegrationFailureMessage struct

+ Cause string

+ IntegrationName string

+ Tenant *string

Nov 7, 2024

Changes in this version

+ const TOPIC_ENQUEUE_FAILURE

+ const TOPIC_ENQUEUE_SUCCESS

+ func EnqueueNotification(topic string, body NotificationMessage) *logger.Error

+ func SendNotificationsFromChannel() *logger.Error

+ type NotificationMessage struct

+ Cause *string

+ DataSource string

+ DataType string

Oct 30, 2024

Changes in this version

+ func ReadPbYaml(f string) ([]byte, *logger.Error)

+ func ReadYaml[t any](f string, jsonMode bool) (*t, *logger.Error)

type Asset

+ Ips []string

+ func (*Asset) Descriptor() ([]byte, []int)

+ func (*Asset) ProtoMessage()

+ func (x *Asset) GetAvailability() int32

+ func (x *Asset) GetConfidentiality() int32

+ func (x *Asset) GetHostnames() []string

+ func (x *Asset) GetIntegrity() int32

+ func (x *Asset) GetIps() []string

+ func (x *Asset) GetName() string

+ func (x *Asset) ProtoReflect() protoreflect.Message

+ func (x *Asset) Reset()

+ func (x *Asset) String() string

type Config

+ func (*Config) Descriptor() ([]byte, []int)

+ func (*Config) ProtoMessage()

+ func (x *Config) GetDisabledRules() []int64

+ func (x *Config) GetEnv() *Env

+ func (x *Config) GetPatterns() map[string]string

+ func (x *Config) GetPipeline() []*Pipeline

+ func (x *Config) GetPlugins() map[string]*structpb.Value

+ func (x *Config) GetTenants() []*Tenant

+ func (x *Config) ProtoReflect() protoreflect.Message

+ func (x *Config) Reset()

+ func (x *Config) String() string

type Env

+ func (*Env) Descriptor() ([]byte, []int)

+ func (*Env) ProtoMessage()

+ func (x *Env) GetLogLevel() int64

+ func (x *Env) GetNodeGroups() []string

+ func (x *Env) GetNodeName() string

+ func (x *Env) GetWorkdir() string

+ func (x *Env) ProtoReflect() protoreflect.Message

+ func (x *Env) Reset()

+ func (x *Env) String() string

type Pipeline

+ func (*Pipeline) Descriptor() ([]byte, []int)

+ func (*Pipeline) ProtoMessage()

+ func (x *Pipeline) GetDataTypes() []string

+ func (x *Pipeline) GetSteps() []*Step

+ func (x *Pipeline) ProtoReflect() protoreflect.Message

+ func (x *Pipeline) Reset()

+ func (x *Pipeline) String() string

type Tenant

+ func (*Tenant) Descriptor() ([]byte, []int)

+ func (*Tenant) ProtoMessage()

+ func (x *Tenant) GetAssets() []*Asset

+ func (x *Tenant) GetDisabledRules() []int64

+ func (x *Tenant) GetId() string

+ func (x *Tenant) GetName() string

+ func (x *Tenant) ProtoReflect() protoreflect.Message

+ func (x *Tenant) Reset()

+ func (x *Tenant) String() string

Sep 26, 2024

Changes in this version

+ type Analysis_AnalyzeClient = grpc.ServerStreamingClient[Alert]

+ type Analysis_AnalyzeServer = grpc.ServerStreamingServer[Alert]

Sep 26, 2024

Changes in this version

+ func PointerOf[t any](s t) *t

Sep 25, 2024

Changes in this version

type Cast

+ Where *Where

+ func (x *Cast) GetWhere() *Where

type Csv

+ Where *Where

+ func (x *Csv) GetWhere() *Where

type Delete

+ Where *Where

+ func (x *Delete) GetWhere() *Where

type Dynamic

+ Where *Where

+ func (x *Dynamic) GetWhere() *Where

type Grok

+ Where *Where

+ func (x *Grok) GetWhere() *Where

type Json

+ Where *Where

+ func (x *Json) GetWhere() *Where

type Kv

+ Where *Where

+ func (x *Kv) GetWhere() *Where

type Reformat

+ Where *Where

+ func (x *Reformat) GetWhere() *Where

type Rename

+ Where *Where

+ func (x *Rename) GetWhere() *Where

type Trim

+ Where *Where

+ func (x *Trim) GetWhere() *Where

Sep 10, 2024

Changes in this version

type Grok

+ Source string

+ func (x *Grok) GetSource() string

type Kv

+ Source string

+ func (x *Kv) GetSource() string

Sep 3, 2024

Changes in this version

+ const Analysis_Analyze_FullMethodName

+ const Correlation_Correlate_FullMethodName

+ const Engine_Input_FullMethodName

+ const Engine_Notify_FullMethodName

+ const Integration_ProcessLog_FullMethodName

+ const Notification_Notify_FullMethodName

+ const NullValue_NULL_VALUE

+ const Parsing_ParseLog_FullMethodName

+ var Analysis_ServiceDesc = grpc.ServiceDesc

+ var Correlation_ServiceDesc = grpc.ServiceDesc

+ var Engine_ServiceDesc = grpc.ServiceDesc

+ var File_plugins_proto protoreflect.FileDescriptor

+ var Integration_ServiceDesc = grpc.ServiceDesc

+ var Notification_ServiceDesc = grpc.ServiceDesc

+ var NullValue_name = structpb.NullValue_name

+ var NullValue_value = structpb.NullValue_value

+ var Parsing_ServiceDesc = grpc.ServiceDesc

+ func CastBool(value interface{}) bool

+ func CastFloat64(value interface{}) float64

+ func CastInt64(value interface{}) int64

+ func CastString(value interface{}) string

+ func DoReq[response any](url string, data []byte, method string, headers map[string]string) (response, int, *logger.Error)

+ func Download(url, file string) *logger.Error

+ func GetCelType(t string) *cel.Type

+ func GetMainIP() (string, *logger.Error)

+ func GetValueOf(value gjson.Result) interface

+ func ListFiles(route string, filter string) []string

+ func Logger() *logger.Logger

+ func PluginCfg[t any](name string) (*t, *logger.Error)

+ func ReadCSV(url string) ([][]string, *logger.Error)

+ func ReadJSON[t any](f string) (*t, *logger.Error)

+ func ReadYAML[t any](f string) (*t, *logger.Error)

+ func RegisterAnalysisServer(s grpc.ServiceRegistrar, srv AnalysisServer)

+ func RegisterCorrelationServer(s grpc.ServiceRegistrar, srv CorrelationServer)

+ func RegisterEngineServer(s grpc.ServiceRegistrar, srv EngineServer)

+ func RegisterIntegrationServer(s grpc.ServiceRegistrar, srv IntegrationServer)

+ func RegisterNotificationServer(s grpc.ServiceRegistrar, srv NotificationServer)

+ func RegisterParsingServer(s grpc.ServiceRegistrar, srv ParsingServer)

+ func ToObject(str *string, object protoreflect.ProtoMessage) *logger.Error

+ func ToString(object protoreflect.ProtoMessage) (*string, *logger.Error)

+ type Ack struct

+ LastId string

+ func (*Ack) Descriptor() ([]byte, []int)

+ func (*Ack) ProtoMessage()

+ func (x *Ack) GetLastId() string

+ func (x *Ack) ProtoReflect() protoreflect.Message

+ func (x *Ack) Reset()

+ func (x *Ack) String() string

+ type Add struct

+ Function string

+ Params map[string]*anypb.Any

+ Where *Where

+ func (*Add) Descriptor() ([]byte, []int)

+ func (*Add) ProtoMessage()

+ func (x *Add) GetFunction() string

+ func (x *Add) GetParams() map[string]*anypb.Any

+ func (x *Add) GetWhere() *Where

+ func (x *Add) ProtoReflect() protoreflect.Message

+ func (x *Add) Reset()

+ func (x *Add) String() string

type Alert

+ func (*Alert) Descriptor() ([]byte, []int)

+ func (*Alert) ProtoMessage()

+ func (x *Alert) GetAdversary() *Side

+ func (x *Alert) GetCategory() string

+ func (x *Alert) GetDataSource() string

+ func (x *Alert) GetDataType() string

+ func (x *Alert) GetDescription() string

+ func (x *Alert) GetEvents() []*Event

+ func (x *Alert) GetId() string

+ func (x *Alert) GetImpact() *Impact

+ func (x *Alert) GetImpactScore() int32

+ func (x *Alert) GetLastUpdate() string

+ func (x *Alert) GetName() string

+ func (x *Alert) GetReferences() []string

+ func (x *Alert) GetSeverity() string

+ func (x *Alert) GetTarget() *Side

+ func (x *Alert) GetTechnique() string

+ func (x *Alert) GetTenantId() string

+ func (x *Alert) GetTenantName() string

+ func (x *Alert) GetTimestamp() string

+ func (x *Alert) ProtoReflect() protoreflect.Message

+ func (x *Alert) Reset()

+ func (x *Alert) String() string

+ type AnalysisClient interface

+ Analyze func(ctx context.Context, in *Event, opts ...grpc.CallOption) (*Alert, error)

+ func NewAnalysisClient(cc grpc.ClientConnInterface) AnalysisClient

+ type AnalysisServer interface

+ Analyze func(context.Context, *Event) (*Alert, error)

+ type Any = anypb.Any

+ type Asset struct

+ Availability int32

+ Confidentiality int32

+ Hostnames []string

+ IPs []string

+ Integrity int32

+ Name string

+ type Cast struct

+ Fields []string

+ To string

+ func (*Cast) Descriptor() ([]byte, []int)

+ func (*Cast) ProtoMessage()

+ func (x *Cast) GetFields() []string

+ func (x *Cast) GetTo() string

+ func (x *Cast) ProtoReflect() protoreflect.Message

+ func (x *Cast) Reset()

+ func (x *Cast) String() string

+ type Config struct

+ DisabledRules []int64

+ Env Env

+ Patterns map[string]string

+ Pipeline []Pipeline

+ Plugins map[string]map[string]interface{}

+ Tenants []Tenant

+ func GetCfg() *Config

+ type CorrelationClient interface

+ Correlate func(ctx context.Context, in *Alert, opts ...grpc.CallOption) (*emptypb.Empty, error)

+ func NewCorrelationClient(cc grpc.ClientConnInterface) CorrelationClient

+ type CorrelationServer interface

+ Correlate func(context.Context, *Alert) (*emptypb.Empty, error)

+ type Csv struct

+ Headers []string

+ Separator string

+ Source string

+ func (*Csv) Descriptor() ([]byte, []int)

+ func (*Csv) ProtoMessage()

+ func (x *Csv) GetHeaders() []string

+ func (x *Csv) GetSeparator() string

+ func (x *Csv) GetSource() string

+ func (x *Csv) ProtoReflect() protoreflect.Message

+ func (x *Csv) Reset()

+ func (x *Csv) String() string

+ type Delete struct

+ Fields []string

+ func (*Delete) Descriptor() ([]byte, []int)

+ func (*Delete) ProtoMessage()

+ func (x *Delete) GetFields() []string

+ func (x *Delete) ProtoReflect() protoreflect.Message

+ func (x *Delete) Reset()

+ func (x *Delete) String() string

+ type Drop struct

+ Where *Where

+ func (*Drop) Descriptor() ([]byte, []int)

+ func (*Drop) ProtoMessage()

+ func (x *Drop) GetWhere() *Where

+ func (x *Drop) ProtoReflect() protoreflect.Message

+ func (x *Drop) Reset()

+ func (x *Drop) String() string

+ type Dynamic struct

+ Params map[string]*anypb.Any

+ Plugin string

+ func (*Dynamic) Descriptor() ([]byte, []int)

+ func (*Dynamic) ProtoMessage()

+ func (x *Dynamic) GetParams() map[string]*anypb.Any

+ func (x *Dynamic) GetPlugin() string

+ func (x *Dynamic) ProtoReflect() protoreflect.Message

+ func (x *Dynamic) Reset()

+ func (x *Dynamic) String() string

+ type Empty = emptypb.Empty

+ type EngineClient interface

+ Input func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Log, Ack], error)

+ Notify func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Message, Ack], error)

+ func NewEngineClient(cc grpc.ClientConnInterface) EngineClient

+ type EngineServer interface

+ Input func(grpc.BidiStreamingServer[Log, Ack]) error

+ Notify func(grpc.BidiStreamingServer[Message, Ack]) error

+ type Engine_InputClient = grpc.BidiStreamingClient[Log, Ack]

+ type Engine_InputServer = grpc.BidiStreamingServer[Log, Ack]

+ type Engine_NotifyClient = grpc.BidiStreamingClient[Message, Ack]

+ type Engine_NotifyServer = grpc.BidiStreamingServer[Message, Ack]

+ type Env struct

+ LogLevel int

+ NodeGroups []string

+ NodeName string

+ Workdir string

type Event

+ Action string

+ ActionResult string

+ func (*Event) Descriptor() ([]byte, []int)

+ func (*Event) ProtoMessage()

+ func (x *Event) GetAction() string

+ func (x *Event) GetActionResult() string

+ func (x *Event) GetConnectionStatus() string

+ func (x *Event) GetDataSource() string

+ func (x *Event) GetDataType() string

+ func (x *Event) GetDeviceTime() string

+ func (x *Event) GetFrom() *Side

+ func (x *Event) GetId() string

+ func (x *Event) GetLocal() *Side

+ func (x *Event) GetLog() map[string]*structpb.Value

+ func (x *Event) GetProtocol() string

+ func (x *Event) GetRaw() string

+ func (x *Event) GetRemote() *Side

+ func (x *Event) GetStatusCode() int64

+ func (x *Event) GetTenantId() string

+ func (x *Event) GetTenantName() string

+ func (x *Event) GetTimestamp() string

+ func (x *Event) GetTo() *Side

+ func (x *Event) ProtoReflect() protoreflect.Message

+ func (x *Event) Reset()

+ func (x *Event) String() string

type Geolocation

+ Accuracy int32

+ CountryCode string

+ func (*Geolocation) Descriptor() ([]byte, []int)

+ func (*Geolocation) ProtoMessage()

+ func (x *Geolocation) GetAccuracy() int32

+ func (x *Geolocation) GetAsn() int64

+ func (x *Geolocation) GetAso() string

+ func (x *Geolocation) GetCity() string

+ func (x *Geolocation) GetCountry() string

+ func (x *Geolocation) GetCountryCode() string

+ func (x *Geolocation) GetLatitude() float64

+ func (x *Geolocation) GetLongitude() float64

+ func (x *Geolocation) ProtoReflect() protoreflect.Message

+ func (x *Geolocation) Reset()

+ func (x *Geolocation) String() string

+ type Grok struct

+ Patterns []*Pattern

+ func (*Grok) Descriptor() ([]byte, []int)

+ func (*Grok) ProtoMessage()

+ func (x *Grok) GetPatterns() []*Pattern

+ func (x *Grok) ProtoReflect() protoreflect.Message

+ func (x *Grok) Reset()

+ func (x *Grok) String() string

type Impact

+ func (*Impact) Descriptor() ([]byte, []int)

+ func (*Impact) ProtoMessage()

+ func (x *Impact) GetAvailability() int32

+ func (x *Impact) GetConfidentiality() int32

+ func (x *Impact) GetIntegrity() int32

+ func (x *Impact) ProtoReflect() protoreflect.Message

+ func (x *Impact) Reset()

+ func (x *Impact) String() string

+ type IntegrationClient interface

+ ProcessLog func(ctx context.Context, opts ...grpc.CallOption) (grpc.BidiStreamingClient[Log, Ack], error)

+ func NewIntegrationClient(cc grpc.ClientConnInterface) IntegrationClient

+ type IntegrationServer interface

+ ProcessLog func(grpc.BidiStreamingServer[Log, Ack]) error

+ type Integration_ProcessLogClient = grpc.BidiStreamingClient[Log, Ack]

+ type Integration_ProcessLogServer = grpc.BidiStreamingServer[Log, Ack]

+ type JLog struct

+ Log string

+ func (*JLog) Descriptor() ([]byte, []int)

+ func (*JLog) ProtoMessage()

+ func (x *JLog) GetLog() string

+ func (x *JLog) ProtoReflect() protoreflect.Message

+ func (x *JLog) Reset()

+ func (x *JLog) String() string

+ type Json struct

+ Source string

+ func (*Json) Descriptor() ([]byte, []int)

+ func (*Json) ProtoMessage()

+ func (x *Json) GetSource() string

+ func (x *Json) ProtoReflect() protoreflect.Message

+ func (x *Json) Reset()

+ func (x *Json) String() string

+ type Kv struct

+ FieldSplit string

+ ValueSplit string

+ func (*Kv) Descriptor() ([]byte, []int)

+ func (*Kv) ProtoMessage()

+ func (x *Kv) GetFieldSplit() string

+ func (x *Kv) GetValueSplit() string

+ func (x *Kv) ProtoReflect() protoreflect.Message

+ func (x *Kv) Reset()

+ func (x *Kv) String() string

+ type ListValue = structpb.ListValue

+ type Log struct

+ DataSource string

+ DataType string

+ Id string

+ Raw string

+ TenantId string

+ Timestamp string

+ func (*Log) Descriptor() ([]byte, []int)

+ func (*Log) ProtoMessage()

+ func (x *Log) GetDataSource() string

+ func (x *Log) GetDataType() string

+ func (x *Log) GetId() string

+ func (x *Log) GetRaw() string

+ func (x *Log) GetTenantId() string

+ func (x *Log) GetTimestamp() string

+ func (x *Log) ProtoReflect() protoreflect.Message

+ func (x *Log) Reset()

+ func (x *Log) String() string

+ type Message struct

+ Id string

+ Message string

+ Timestamp string

+ Topic string

+ func (*Message) Descriptor() ([]byte, []int)

+ func (*Message) ProtoMessage()

+ func (x *Message) GetId() string

+ func (x *Message) GetMessage() string

+ func (x *Message) GetTimestamp() string

+ func (x *Message) GetTopic() string

+ func (x *Message) ProtoReflect() protoreflect.Message

+ func (x *Message) Reset()

+ func (x *Message) String() string

+ type NotificationClient interface

+ Notify func(ctx context.Context, in *Message, opts ...grpc.CallOption) (*emptypb.Empty, error)

+ func NewNotificationClient(cc grpc.ClientConnInterface) NotificationClient

+ type NotificationServer interface

+ Notify func(context.Context, *Message) (*emptypb.Empty, error)

+ type NullValue = structpb.NullValue

+ type ParsingClient interface

+ ParseLog func(ctx context.Context, in *Transform, opts ...grpc.CallOption) (*JLog, error)

+ func NewParsingClient(cc grpc.ClientConnInterface) ParsingClient

+ type ParsingServer interface

+ ParseLog func(context.Context, *Transform) (*JLog, error)

+ type Pattern struct

+ FieldName string

+ Pattern string

+ func (*Pattern) Descriptor() ([]byte, []int)

+ func (*Pattern) ProtoMessage()

+ func (x *Pattern) GetFieldName() string

+ func (x *Pattern) GetPattern() string

+ func (x *Pattern) ProtoReflect() protoreflect.Message

+ func (x *Pattern) Reset()

+ func (x *Pattern) String() string

+ type Pipeline struct

+ DataTypes []string

+ Steps []Step

+ type Reformat struct

+ Fields []string

+ FromFormat string

+ Function string

+ ToFormat string

+ func (*Reformat) Descriptor() ([]byte, []int)

+ func (*Reformat) ProtoMessage()

+ func (x *Reformat) GetFields() []string

+ func (x *Reformat) GetFromFormat() string

+ func (x *Reformat) GetFunction() string

+ func (x *Reformat) GetToFormat() string

+ func (x *Reformat) ProtoReflect() protoreflect.Message

+ func (x *Reformat) Reset()

+ func (x *Reformat) String() string

+ type Rename struct

+ From []string

+ To string

+ func (*Rename) Descriptor() ([]byte, []int)

+ func (*Rename) ProtoMessage()

+ func (x *Rename) GetFrom() []string

+ func (x *Rename) GetTo() string

+ func (x *Rename) ProtoReflect() protoreflect.Message

+ func (x *Rename) Reset()

+ func (x *Rename) String() string

type Side

+ Geolocation *Geolocation

+ Ip string

+ Ips []string

+ Md5 string

+ Md5S []string

+ Sha1 string

+ Sha1S []string

+ Sha256 string

+ Sha256S []string

+ Url string

+ Urls []string

+ func (*Side) Descriptor() ([]byte, []int)

+ func (*Side) ProtoMessage()

+ func (x *Side) GetBytesReceived() float64

+ func (x *Side) GetBytesSent() float64

+ func (x *Side) GetCommand() string

+ func (x *Side) GetCommands() []string

+ func (x *Side) GetConnections() int64

+ func (x *Side) GetDomain() string

+ func (x *Side) GetDomains() []string

+ func (x *Side) GetEmail() string

+ func (x *Side) GetEmails() []string

+ func (x *Side) GetFile() string

+ func (x *Side) GetFiles() []string

+ func (x *Side) GetFqdn() string

+ func (x *Side) GetFqdns() []string

+ func (x *Side) GetFreeCpuPercent() int64

+ func (x *Side) GetFreeMemPercent() int64

+ func (x *Side) GetGeolocation() *Geolocation

+ func (x *Side) GetGeolocations() []*Geolocation

+ func (x *Side) GetGroup() string

+ func (x *Side) GetGroups() []string

+ func (x *Side) GetHost() string

+ func (x *Side) GetHosts() []string

+ func (x *Side) GetIp() string

+ func (x *Side) GetIps() []string

+ func (x *Side) GetMac() string

+ func (x *Side) GetMacs() []string

+ func (x *Side) GetMd5() string

+ func (x *Side) GetMd5S() []string

+ func (x *Side) GetPackagesReceived() int64

+ func (x *Side) GetPackagesSent() int64

+ func (x *Side) GetPath() string

+ func (x *Side) GetPaths() []string

+ func (x *Side) GetPort() int64

+ func (x *Side) GetPorts() []int64

+ func (x *Side) GetProcess() string

+ func (x *Side) GetProcesses() []string

+ func (x *Side) GetSha1() string

+ func (x *Side) GetSha1S() []string

+ func (x *Side) GetSha256() string

+ func (x *Side) GetSha256S() []string

+ func (x *Side) GetTotalCpuPercent() int64

+ func (x *Side) GetTotalMemPercent() int64

+ func (x *Side) GetUrl() string

+ func (x *Side) GetUrls() []string

+ func (x *Side) GetUsedCpuPercent() int64

+ func (x *Side) GetUsedMemPercent() int64

+ func (x *Side) GetUser() string

+ func (x *Side) GetUsers() []string

+ func (x *Side) ProtoReflect() protoreflect.Message

+ func (x *Side) Reset()

+ func (x *Side) String() string

+ type Step struct

+ Add *Add

+ Cast *Cast

+ Csv *Csv

+ Delete *Delete

+ Drop *Drop

+ Dynamic *Dynamic

+ Grok *Grok

+ Json *Json

+ Kv *Kv

+ Reformat *Reformat

+ Rename *Rename

+ Trim *Trim

+ func (*Step) Descriptor() ([]byte, []int)

+ func (*Step) ProtoMessage()

+ func (x *Step) GetAdd() *Add

+ func (x *Step) GetCast() *Cast

+ func (x *Step) GetCsv() *Csv

+ func (x *Step) GetDelete() *Delete

+ func (x *Step) GetDrop() *Drop

+ func (x *Step) GetDynamic() *Dynamic

+ func (x *Step) GetGrok() *Grok

+ func (x *Step) GetJson() *Json

+ func (x *Step) GetKv() *Kv

+ func (x *Step) GetReformat() *Reformat

+ func (x *Step) GetRename() *Rename

+ func (x *Step) GetTrim() *Trim

+ func (x *Step) ProtoReflect() protoreflect.Message

+ func (x *Step) Reset()

+ func (x *Step) String() string

+ type Struct = structpb.Struct

+ type Tenant struct

+ Assets []Asset

+ DisabledRules []int64

+ Id string

+ Name string

+ type Transform struct

+ Jlog *JLog

+ Step *Step

+ func (*Transform) Descriptor() ([]byte, []int)

+ func (*Transform) ProtoMessage()

+ func (x *Transform) GetJlog() *JLog

+ func (x *Transform) GetStep() *Step

+ func (x *Transform) ProtoReflect() protoreflect.Message

+ func (x *Transform) Reset()

+ func (x *Transform) String() string

+ type Trim struct

+ Fields []string

+ Function string

+ Substring string

+ func (*Trim) Descriptor() ([]byte, []int)

+ func (*Trim) ProtoMessage()

+ func (x *Trim) GetFields() []string

+ func (x *Trim) GetFunction() string

+ func (x *Trim) GetSubstring() string

+ func (x *Trim) ProtoReflect() protoreflect.Message

+ func (x *Trim) Reset()

+ func (x *Trim) String() string

+ type UnimplementedAnalysisServer struct

+ func (UnimplementedAnalysisServer) Analyze(context.Context, *Event) (*Alert, error)

+ type UnimplementedCorrelationServer struct

+ func (UnimplementedCorrelationServer) Correlate(context.Context, *Alert) (*emptypb.Empty, error)

+ type UnimplementedEngineServer struct

+ func (UnimplementedEngineServer) Input(grpc.BidiStreamingServer[Log, Ack]) error

+ func (UnimplementedEngineServer) Notify(grpc.BidiStreamingServer[Message, Ack]) error

+ type UnimplementedIntegrationServer struct

+ func (UnimplementedIntegrationServer) ProcessLog(grpc.BidiStreamingServer[Log, Ack]) error

+ type UnimplementedNotificationServer struct

+ func (UnimplementedNotificationServer) Notify(context.Context, *Message) (*emptypb.Empty, error)

+ type UnimplementedParsingServer struct

+ func (UnimplementedParsingServer) ParseLog(context.Context, *Transform) (*JLog, error)

+ type UnsafeAnalysisServer interface

+ type UnsafeCorrelationServer interface

+ type UnsafeEngineServer interface

+ type UnsafeIntegrationServer interface

+ type UnsafeNotificationServer interface

+ type UnsafeParsingServer interface

+ type Value = structpb.Value

+ type Value_BoolValue = structpb.Value_BoolValue

+ type Value_ListValue = structpb.Value_ListValue

+ type Value_NullValue = structpb.Value_NullValue

+ type Value_NumberValue = structpb.Value_NumberValue

+ type Value_StringValue = structpb.Value_StringValue

+ type Value_StructValue = structpb.Value_StructValue

+ type Variable struct

+ As string

+ Get string

+ OfType string

+ func (*Variable) Descriptor() ([]byte, []int)

+ func (*Variable) ProtoMessage()

+ func (x *Variable) GetAs() string

+ func (x *Variable) GetGet() string

+ func (x *Variable) GetOfType() string

+ func (x *Variable) ProtoReflect() protoreflect.Message

+ func (x *Variable) Reset()

+ func (x *Variable) String() string

+ type Where struct

+ Expression string

+ Variables []*Variable

+ func (*Where) Descriptor() ([]byte, []int)

+ func (*Where) ProtoMessage()

+ func (def *Where) Evaluate(event *string) bool

+ func (x *Where) GetExpression() string

+ func (x *Where) GetVariables() []*Variable

+ func (x *Where) ProtoReflect() protoreflect.Message

+ func (x *Where) Reset()

+ func (x *Where) String() string

Jun 10, 2024

Changes in this version

+ type Notification struct

+ Id *string

+ Message string

+ Timestamp string

+ Topic string

Jun 10, 2024

Changes in this version

type Alert

+ Category string

Jun 8, 2024

Changes in this version

type Alert

+ Description string

+ References []string

Jun 8, 2024

Changes in this version

type Alert

+ DataSource string

+ DataType string

Jun 8, 2024

Changes in this version

+ type Metadata struct

+ Author string

+ Description string

+ Name string

+ Type string

+ Version string

Jun 8, 2024

Changes in this version

+ type Alert struct

+ Adversary *Side

+ Events []Event

+ Id *string

+ Impact Impact

+ ImpactScore int

+ LastUpdate string

+ Name string

+ Severity string

+ Tactic string

+ Target *Side

+ Technique string

+ TenantId string

+ TenantName *string

+ Timestamp string

+ type Event struct

+ ConnectionStatus *string

+ DataSource string

+ DataType string

+ DeviceTime string

+ From *Side

+ Id *string

+ Local *Side

+ Log map[string]interface{}

+ Protocol *string

+ Raw *string

+ Remote *Side

+ StatusCode *int64

+ TenantId string

+ TenantName *string

+ Timestamp string

+ To *Side

+ type Geolocation struct

+ Asn *int64

+ Aso *string

+ City *string

+ Country *string

+ Latitude *float64

+ Longitude *float64

+ type Impact struct

+ Availability int

+ Confidentiality int

+ Integrity int

+ type Side struct

+ ASN *int64

+ ASO *string

+ BytesReceived *float64

+ BytesSent *float64

+ Command *string

+ Commands []string

+ Connections *int64

+ Domain *string

+ Domains []string

+ Email *string

+ Emails []string

+ File *string

+ Files []string

+ Fqdn *string

+ Fqdns []string

+ FreeCpuPercent *int64

+ FreeMemPercent *int64

+ Geolocations []Geolocation

+ Group *string

+ Groups []string

+ Host *string

+ Hosts []string

+ IP *string

+ IPs []string

+ MD5 *string

+ MD5s []string

+ Mac *string

+ Macs []string

+ PackagesReceived *int64

+ PackagesSent *int64

+ Path *string

+ Paths []string

+ Port *int64

+ Ports []int64

+ Process *string

+ Processes []string

+ SHA1 *string

+ SHA1s []string

+ SHA256 *string

+ SHA256s []string

+ TotalCpuPercent *int64

+ TotalMemPercent *int64

+ URL *string

+ URLs []string

+ UsedCpuPercent *int64

+ UsedMemPercent *int64

+ User *string

+ Users []string