Processors Module

This module contains classes and functions related to processing events in the EventManager.

class EventManager.processors.EnrichingProcessor(enriching_fields: list)[source]

Bases: Processor

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:: event – The key-value formatted event string.
Returns:: The processed event string.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:: event – The JSON formatted event string.
Returns:: The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:: event – The XML formatted event string.
Returns:: The processed event string.

class EventManager.processors.FilterProcessor(term_to_filter: list)[source]

Bases: Processor

The FilterProcessor class implements the Processor interface and provides functionality to filter events.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:: event – The key-value formatted event string.
Returns:: The processed event string.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:: event – The JSON formatted event string.
Returns:: The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:: event – The XML formatted event string.
Returns:: The processed event string.

class EventManager.processors.RegexProcessor(regex_entries: list[EventManager.filehandlers.config.regex_entry.RegexEntry] = None)[source]

Bases: object

process_kv(event: str) → str[source]

process_json(event: str) → str[source]

process_xml(event: str) → str[source]

class EventManager.processors.SampleProcessor(sample_size: int)[source]

Bases: Processor

The SampleProcessor class implements the Processor interface and provides functionality to sample events. It drops the first N-1 events and keeps every N-th event, where N is the sample size.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:: event – The key-value formatted event string.
Returns:: The processed event string.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:: event – The JSON formatted event string.
Returns:: The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:: event – The XML formatted event string.
Returns:: The processed event string.

class EventManager.processors.MaskPasswords[source]

Bases: Processor

The MaskPasswords class implements the Processor interface and provides functionality to mask passwords in events.

process_kv(event: str) → str[source]: Masks passwords in key-value formatted event data.

process_json(event: str) → str[source]: Masks passwords in JSON formatted event data.

process_xml(event: str) → str[source]: Masks passwords in XML formatted event data.

class EventManager.processors.MaskIPV4Address(ip_address_ranges: list)[source]

Bases: Processor

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:: event – The key-value formatted event string.
Returns:: The processed event string.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:: event – The JSON formatted event string.
Returns:: The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:: event – The XML formatted event string.
Returns:: The processed event string.