Processors Module

This module contains classes and functions related to processing events in the EventManager.

class EventManager.processors.EnrichingProcessor(enriching_fields: list)[source]

Bases: Processor

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:

event – The JSON formatted event string.

Returns:

The processed event string.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:

event – The key-value formatted event string.

Returns:

The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:

event – The XML formatted event string.

Returns:

The processed event string.

class EventManager.processors.FilterProcessor(term_to_filter: list)[source]

Bases: Processor

The FilterProcessor class implements the Processor interface and provides functionality to filter events.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:

event – The JSON formatted event string.

Returns:

The processed event string.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:

event – The key-value formatted event string.

Returns:

The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:

event – The XML formatted event string.

Returns:

The processed event string.

class EventManager.processors.RegexProcessor(regex_entries: list[RegexEntry] = None)[source]

Bases: object

process_json(event: str) → str[source]
process_kv(event: str) → str[source]
process_xml(event: str) → str[source]
class EventManager.processors.SampleProcessor(sample_size: int)[source]

Bases: Processor

The SampleProcessor class implements the Processor interface and provides functionality to sample events. It drops the first N-1 events and keeps every N-th event, where N is the sample size.

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:

event – The JSON formatted event string.

Returns:

The processed event string.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:

event – The key-value formatted event string.

Returns:

The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:

event – The XML formatted event string.

Returns:

The processed event string.

class EventManager.processors.MaskPasswords[source]

Bases: Processor

The MaskPasswords class implements the Processor interface and provides functionality to mask passwords in events.

process_json(event: str) → str[source]

Masks passwords in JSON formatted event data.

process_kv(event: str) → str[source]

Masks passwords in key-value formatted event data.

process_xml(event: str) → str[source]

Masks passwords in XML formatted event data.

class EventManager.processors.MaskIPV4Address(ip_address_ranges: list)[source]

Bases: Processor

process_json(event: str) → str[source]

Processes a JSON formatted event.

Parameters:

event – The JSON formatted event string.

Returns:

The processed event string.

process_kv(event: str) → str[source]

Processes a key-value formatted event.

Parameters:

event – The key-value formatted event string.

Returns:

The processed event string.

process_xml(event: str) → str[source]

Processes an XML formatted event.

Parameters:

event – The XML formatted event string.

Returns:

The processed event string.