gcpaudit

Documentation

Index

• Constants
• type Plugin
  • func (p *Plugin) Extract(req sdk.ExtractRequest, evt sdk.EventReader) error
  • func (p *Plugin) Fields() []sdk.FieldEntry
  • func (p *Plugin) Info() *plugins.Info
  • func (p *Plugin) Init(cfg string) error
  • func (p *Plugin) InitSchema() *sdk.SchemaInfo
  • func (p *Plugin) Open(params string) (source.Instance, error)
  • func (p *Plugin) String(evt sdk.EventReader) (string, error)
• type PluginConfig
  • func (p *PluginConfig) Reset()

Constants

const (
	PluginID          uint32 = 12
	PluginName               = "gcpaudit"
	PluginDescription        = "Read GCP Audit Logs"
	PluginContact            = "github.com/falcosecurity/plugins"
	PluginVersion            = "0.3.2"
	PluginEventSource        = "gcp_auditlog"
)

Types

type Plugin

type Plugin struct {
	plugins.BasePlugin
	Config PluginConfig
	// contains filtered or unexported fields
}

func (*Plugin) Extract

func (p *Plugin) Extract(req sdk.ExtractRequest, evt sdk.EventReader) error

func (*Plugin) Fields

func (p *Plugin) Fields() []sdk.FieldEntry

func (*Plugin) Info

func (p *Plugin) Info() *plugins.Info

func (*Plugin) Init

func (p *Plugin) Init(cfg string) error

initialize state

func (*Plugin) InitSchema

func (p *Plugin) InitSchema() *sdk.SchemaInfo

func (*Plugin) Open

func (p *Plugin) Open(params string) (source.Instance, error)

func (*Plugin) String

func (p *Plugin) String(evt sdk.EventReader) (string, error)

type PluginConfig

type PluginConfig struct {
	ProjectID              string `json:"project_id" jsonschema:"title=Project ID,description=A unique identifier for a GCP project (Default: empty),default="`
	CredentialsFile        string `` /* 271-byte string literal not displayed */
	NumGoroutines          int    `` /* 175-byte string literal not displayed */
	MaxOutstandingMessages int    `` /* 159-byte string literal not displayed */
}

func (*PluginConfig) Reset

func (p *PluginConfig) Reset()

Reset sets the configuration to its default values