Documentation
¶
Index ¶
- Constants
- type ActivityLog
- type ActivityLogAuthorization
- type ActivityLogHttpRequest
- type ActivityLogMapper
- type ActivityLogTable
- func (c *ActivityLogTable) EnrichRow(row *ActivityLog, sourceEnrichmentFields schema.SourceEnrichment) (*ActivityLog, error)
- func (c *ActivityLogTable) GetDescription() string
- func (c *ActivityLogTable) GetSourceMetadata() []*table.SourceMetadata[*ActivityLog]
- func (c *ActivityLogTable) Identifier() string
- type Authorization
- type AzureStorageAccountLog
- type Evidence
- type Identity
Constants ¶
View Source
const ActivityLogTableIdentifier = "azure_activity_log"
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type ActivityLog ¶
type ActivityLog struct {
schema.CommonFields
AuthorizationInfo *ActivityLogAuthorization `json:"authorization_info,omitempty"`
Caller *string `json:"caller"`
Category *string `json:"category"`
Claims *map[string]*string `json:"claims,omitempty" parquet:"type=JSON"`
CorrelationID *string `json:"correlation_id"`
Description *string `json:"description"`
EventDataID *string `json:"event_data_id"`
EventName *string `json:"event_name"`
EventTimestamp *time.Time `json:"event_timestamp"`
HttpRequest *ActivityLogHttpRequest `json:"http_request,omitempty"`
ID *string `json:"id"`
Level *string `json:"level"`
OperationID *string `json:"operation_id"`
OperationName *string `json:"operation_name"`
Properties *map[string]*string `json:"properties,omitempty" parquet:"type=JSON"`
ResourceGroupName *string `json:"resource_group_name"`
ResourceID *string `json:"resource_id"`
ResourceProviderName *string `json:"resource_provider_name"`
ResourceType *string `json:"resource_type"`
Status *string `json:"status"`
SubStatus *string `json:"sub_status"`
SubmissionTimestamp *time.Time `json:"submission_timestamp"`
SubscriptionID *string `json:"subscription_id"`
TenantID *string `json:"tenant_id"`
}
func (*ActivityLog) GetColumnDescriptions ¶
func (a *ActivityLog) GetColumnDescriptions() map[string]string
type ActivityLogHttpRequest ¶
type ActivityLogMapper ¶
type ActivityLogMapper struct{}
func (*ActivityLogMapper) Identifier ¶
func (m *ActivityLogMapper) Identifier() string
func (*ActivityLogMapper) Map ¶
func (m *ActivityLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*ActivityLog]) (*ActivityLog, error)
type ActivityLogTable ¶
type ActivityLogTable struct {
}
func (*ActivityLogTable) EnrichRow ¶
func (c *ActivityLogTable) EnrichRow(row *ActivityLog, sourceEnrichmentFields schema.SourceEnrichment) (*ActivityLog, error)
func (*ActivityLogTable) GetDescription ¶
func (c *ActivityLogTable) GetDescription() string
func (*ActivityLogTable) GetSourceMetadata ¶
func (c *ActivityLogTable) GetSourceMetadata() []*table.SourceMetadata[*ActivityLog]
func (*ActivityLogTable) Identifier ¶
func (c *ActivityLogTable) Identifier() string
type Authorization ¶
type AzureStorageAccountLog ¶
type AzureStorageAccountLog struct {
RoleLocation *string `json:"RoleLocation,omitempty"`
Stamp *string `json:"Stamp,omitempty"`
ReleaseVersion *string `json:"ReleaseVersion,omitempty"`
Time *time.Time `json:"time,omitempty"`
ResourceID *string `json:"resourceId,omitempty"`
OperationName *string `json:"operationName,omitempty"`
Category *string `json:"category,omitempty"`
ResultType *string `json:"resultType,omitempty"`
ResultSignature *string `json:"resultSignature,omitempty"`
CallerIPAddress *string `json:"callerIpAddress,omitempty"`
CorrelationID *string `json:"correlationId,omitempty"`
Identity *Identity `json:"identity,omitempty"`
Level *string `json:"level,omitempty"`
Properties *map[string]interface{} `json:"properties,omitempty"` // Dynamic structure
TenantID *string `json:"tenantId,omitempty"`
}
type Evidence ¶
type Evidence struct {
Role *string `json:"role,omitempty"`
RoleAssignmentScope *string `json:"roleAssignmentScope,omitempty"`
RoleAssignmentID *string `json:"roleAssignmentId,omitempty"`
RoleDefinitionID *string `json:"roleDefinitionId,omitempty"`
PrincipalID *string `json:"principalId,omitempty"`
PrincipalType *string `json:"principalType,omitempty"`
}
type Identity ¶
type Identity struct {
Authorization Authorization `json:"authorization,omitempty"`
Claims *map[string]interface{} `json:"claims,omitempty"` // Dynamic structure
}
Click to show internal directories.
Click to hide internal directories.