class Amazonite::CloudWatchLogs::ParseToOCSF

• Amazonite::CloudWatchLogs::ParseToOCSF
• Reference
• Object

Overview

This processor converts logs into Open Cybersecurity Schema Framework (OCSF) events.

For more information about this processor including examples, see parseToOCSF in the CloudWatch Logs User Guide.

Included Modules

• JSON::Serializable

Defined in:

cloudwatch_logs/parse_to_ocsf.cr

Constructors

• .new(event_source : EventSource, ocsf_version : OCSFVersion, source : String | Nil = nil, mapping_version : String | Nil = nil)
• .new(pull : JSON::PullParser)
• .new(*, __pull_for_json_serializable pull : JSON::PullParser)

Instance Method Summary

• #==(other : self)

  Returns true if this reference is the same as other.

• #event_source : EventSource

  Specify the service or process that produces the log events that will be converted with this processor.

• #event_source=(event_source : EventSource)

  Specify the service or process that produces the log events that will be converted with this processor.

• #hash(hasher)

  See Object#hash(hasher)

• #mapping_version : String | Nil

  The version of the OCSF mapping to use for parsing log data.

• #mapping_version=(mapping_version : String | Nil)

  The version of the OCSF mapping to use for parsing log data.

• #ocsf_version : OCSFVersion

  Specify which version of the OCSF schema to use for the transformed log events.

• #ocsf_version=(ocsf_version : OCSFVersion)

  Specify which version of the OCSF schema to use for the transformed log events.

• #source : String | Nil

  The path to the field in the log event that you want to parse.

• #source=(source : String | Nil)

  The path to the field in the log event that you want to parse.

• #validate! : Nil

Constructor Detail

Instance Method Detail