autosuppression

Documentation

Overview

Package autosuppression holds auto suppression related files

Index

• type AutoSuppression
  • func (as *AutoSuppression) Apply(ruleSet *rules.RuleSet)
  • func (as *AutoSuppression) GetStats() map[StatsTags]int64
  • func (as *AutoSuppression) Init(opts Opts)
  • func (as *AutoSuppression) Suppresses(rule *rules.Rule, event *model.Event) bool
• type Opts
• type StatsTags

Types

type AutoSuppression

type AutoSuppression struct {
	// contains filtered or unexported fields
}

AutoSuppression is a struct that encapsulates the auto suppression logic

func (*AutoSuppression) Apply

func (as *AutoSuppression) Apply(ruleSet *rules.RuleSet)

Apply resets the auto suppression stats based on the given ruleset

func (*AutoSuppression) GetStats

func (as *AutoSuppression) GetStats() map[StatsTags]int64

GetStats returns the auto suppressions stats

func (*AutoSuppression) Init

func (as *AutoSuppression) Init(opts Opts)

Init initializes the auto suppression with the given options

func (*AutoSuppression) Suppresses

func (as *AutoSuppression) Suppresses(rule *rules.Rule, event *model.Event) bool

Suppresses returns true if the event should be suppressed for the given rule, false otherwise. It also counts statistics depending on this result

type Opts

type Opts struct {
	SecurityProfileAutoSuppressionEnabled bool
	ActivityDumpAutoSuppressionEnabled    bool
	EventTypes                            []model.EventType
}

Opts holds options for auto suppression

type StatsTags

type StatsTags struct {
	RuleID   string
	TreeType string
}

StatsTags holds tags for auto suppression stats