auditd

Documentation

Index

• func Chop(rulePath string, outputType string, filePath string) interface{}
• func FindLog(file string) (string, error)
• type AuditEvent
  • func ParseEvents(logFile string) ([]AuditEvent, error)
  • func (e AuditEvent) Keywords() ([]string, bool)
  • func (e AuditEvent) Select(name string) (interface{}, bool)

Functions

func Chop

func Chop(rulePath string, outputType string, filePath string) interface{}

func FindLog

func FindLog(file string) (string, error)

FindLog takes the file from the given path or finds the location of the audit log file by parsing the auditd.conf file

Types

type AuditEvent

type AuditEvent struct {
	Type string
	Data map[string]string
}

AuditEvent represents an Audit log event

func ParseEvents

func ParseEvents(logFile string) ([]AuditEvent, error)

func (AuditEvent) Keywords

func (e AuditEvent) Keywords() ([]string, bool)

Keywords returns the keywords for an AuditEvent

func (AuditEvent) Select

func (e AuditEvent) Select(name string) (interface{}, bool)

Select returns the value of the given field for an AuditEvent