fluent-plugin-audit_log_parser 0.1.2 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 80c8e125bb80ca1d6cfc47e261394906e09be6c0
|
|
4
|
+
data.tar.gz: b8c077c6951afe4a929556e65e74cfa87d6190ce
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: eb157a631385de72bcb608da828a35414a6f8e0c1f92525b2094a70526cf3611f9eb4d3a43371a59a3247a15d0657ee4a7f2e0057fba91b02c2c17d3c9bec43f
|
|
7
|
+
data.tar.gz: c5299949f6801324616f3d62e7f8b159d3b1c525cb06bb48c710e48da5fd25b72ac89312e47be9c22cb3b7192c32d62d51498a991f4f87ba4bc90cd576006172
|
|
Binary file
|
|
@@ -4,7 +4,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
|
|
|
4
4
|
|
|
5
5
|
Gem::Specification.new do |spec|
|
|
6
6
|
spec.name = 'fluent-plugin-audit_log_parser'
|
|
7
|
-
spec.version = '0.1.
|
|
7
|
+
spec.version = '0.1.3'
|
|
8
8
|
spec.authors = ['Josef Karasek']
|
|
9
9
|
spec.email = ['jkarasek@redhat.com']
|
|
10
10
|
spec.summary = %q{Fluentd plugin for parsing auditd logs}
|
|
@@ -15,6 +15,12 @@ module Fluent
|
|
|
15
15
|
begin
|
|
16
16
|
parsed_line = @auditd.parse_auditd_line text
|
|
17
17
|
time = parsed_line.nil? ? nil : DateTime.parse(parsed_line['time']).to_time.to_f
|
|
18
|
+
|
|
19
|
+
# debugging hack
|
|
20
|
+
parsed_line = {"not" => "found"} if parsed_line.nil?
|
|
21
|
+
time = 0 if parsed_line.nil?
|
|
22
|
+
# end of debugging hack
|
|
23
|
+
|
|
18
24
|
yield time, parsed_line
|
|
19
25
|
rescue Fluent::Auditd::AuditdParserException => e
|
|
20
26
|
log.error e.message
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: fluent-plugin-audit_log_parser
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.1.
|
|
4
|
+
version: 0.1.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Josef Karasek
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2017-10-
|
|
11
|
+
date: 2017-10-06 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: bundler
|
|
@@ -76,6 +76,7 @@ files:
|
|
|
76
76
|
- Gemfile
|
|
77
77
|
- LICENSE
|
|
78
78
|
- README.md
|
|
79
|
+
- fluent-plugin-audit_log_parser-0.1.2.gem
|
|
79
80
|
- fluent-plugin-audit_log_parser.gemspec
|
|
80
81
|
- lib/fluent/plugin/auditd.rb
|
|
81
82
|
- lib/fluent/plugin/parser_auditd.rb
|