aucoalesce

Documentation

Overview

Package aucoalesce provides functions to coalesce related audit messages into a single event.

Index

• func CoalesceMessages(msgs []*auparse.AuditMessage) (map[string]interface{}, error)

Functions

func CoalesceMessages

func CoalesceMessages(msgs []*auparse.AuditMessage) (map[string]interface{}, error)

CoalesceMessages combines the given messages into a single event. It assumes that all the messages in the slice have the same timestamp and sequence number. An error is returned is msgs is empty or nil.