 Documentation
      ¶
      Documentation
      ¶
    
    
  
    
  
    Index ¶
- Variables
- func Plugin(name string, c Constructor) map[string][]interface{}
- func RegisterPlugin(name string, constructor Constructor)
- type Condition
- type ConditionConfig
- type ConditionFields
- type Constructor
- type EqualsValue
- type Namespace
- type PluginConfig
- type Processor
- type Processors
- type RangeValue
- type WhenProcessor
Constants ¶
This section is empty.
Variables ¶
      View Source
      
  var MandatoryExportedFields = []string{"type"}
    fields that should be always exported
Functions ¶
func Plugin ¶
func Plugin(name string, c Constructor) map[string][]interface{}
func RegisterPlugin ¶
func RegisterPlugin(name string, constructor Constructor)
Types ¶
type Condition ¶
type Condition struct {
	// contains filtered or unexported fields
}
    func NewCondition ¶
func NewCondition(config *ConditionConfig) (*Condition, error)
func NewConditionList ¶
func NewConditionList(config []ConditionConfig) ([]Condition, error)
type ConditionConfig ¶
type ConditionConfig struct {
	Equals   *ConditionFields  `config:"equals"`
	Contains *ConditionFields  `config:"contains"`
	Regexp   *ConditionFields  `config:"regexp"`
	Range    *ConditionFields  `config:"range"`
	OR       []ConditionConfig `config:"or"`
	AND      []ConditionConfig `config:"and"`
	NOT      *ConditionConfig  `config:"not"`
}
    type ConditionFields ¶
type ConditionFields struct {
	// contains filtered or unexported fields
}
    func (*ConditionFields) Unpack ¶
func (f *ConditionFields) Unpack(to interface{}) error
type Constructor ¶
func NewConditional ¶
func NewConditional( ruleFactory Constructor, ) Constructor
type EqualsValue ¶
func (EqualsValue) String ¶
func (e EqualsValue) String() string
type Namespace ¶
type Namespace struct {
	// contains filtered or unexported fields
}
    func (*Namespace) Plugin ¶
func (ns *Namespace) Plugin() Constructor
func (*Namespace) Register ¶
func (ns *Namespace) Register(name string, factory Constructor) error
type Processor ¶
func NewConditionRule ¶
func NewConditionRule( config ConditionConfig, p Processor, ) (Processor, error)
type Processors ¶
type Processors struct {
	List []Processor
}
    func New ¶
func New(config PluginConfig) (*Processors, error)
func (*Processors) All ¶
func (procs *Processors) All() []beat.Processor
func (*Processors) Run ¶
func (procs *Processors) Run(event *beat.Event) *beat.Event
Applies a sequence of processing rules and returns the filtered event
func (*Processors) RunBC ¶
func (procs *Processors) RunBC(event common.MapStr) common.MapStr
RunBC (run backwards-compatible) applies the processors, by providing the old interface based on common.MapStr. The event us temporarily converted to beat.Event. By this 'conversion' the '@timestamp' field can not be accessed by processors. Note: this method will be removed, when the publisher pipeline BC-API is to
be removed.
func (Processors) String ¶
func (procs Processors) String() string
type RangeValue ¶
type RangeValue struct {
	// contains filtered or unexported fields
}
    func (RangeValue) String ¶
func (r RangeValue) String() string
       Source Files
      ¶
      Source Files
      ¶
    
- condition.go
- config.go
- namespace.go
- processor.go
- registry.go
 Click to show internal directories. 
   Click to hide internal directories.