fluent-plugin-windows-eventlog 0.9.1 → 0.9.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: ce765b8becd1cc7835d19f2f1b9e3e0b1da48467f26434295e041887a4d8d057
|
|
4
|
+
data.tar.gz: 59129a827b949a6db83ba01f6d03da41ae0923304fcc479aecc7b37127517835
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 74b3233cd11710c90c456e313d4f87ec0fcc5392bbb12761f8e62398aa8cda1b7ec6ae9cbbe5b4c74bb26be1e804c804a7eea6c8796887bd97924b768362e56f
|
|
7
|
+
data.tar.gz: 36e9a709f939d021e75ccc1723207b1dbb524aa2f5658aeefa319476a67d142e888518f037202934fbb2458006e77ce3269bd87572ca988457872aaf47cf6242
|
data/CHANGELOG.md
CHANGED
|
@@ -4,7 +4,7 @@ $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
|
|
|
4
4
|
|
|
5
5
|
Gem::Specification.new do |spec|
|
|
6
6
|
spec.name = "fluent-plugin-windows-eventlog"
|
|
7
|
-
spec.version = "0.9.
|
|
7
|
+
spec.version = "0.9.2"
|
|
8
8
|
spec.authors = ["okahashi117", "Hiroshi Hatake", "Masahiro Nakagawa"]
|
|
9
9
|
spec.email = ["naruki_okahashi@jbat.co.jp", "cosmo0920.oucc@gmail.com", "repeatedly@gmail.com"]
|
|
10
10
|
spec.summary = %q{Fluentd Input plugin to read windows event log.}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
A service was installed in the system.
|
|
2
|
+
|
|
3
|
+
Subject:
|
|
4
|
+
Security ID: SYSTEM
|
|
5
|
+
Account Name: 824ZWL3$
|
|
6
|
+
Account Domain: WORKGROUP
|
|
7
|
+
Logon ID: 0x3E7
|
|
8
|
+
|
|
9
|
+
Service Information:
|
|
10
|
+
Service Name: WpnUserService_a46b7
|
|
11
|
+
Service File Name: C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
|
|
12
|
+
Service Type: 0xE0
|
|
13
|
+
Service Start Type: 2
|
|
14
|
+
Service Account: LocalSystem
|
|
@@ -325,6 +325,27 @@ DESC
|
|
|
325
325
|
assert_equal(expected, h)
|
|
326
326
|
end
|
|
327
327
|
|
|
328
|
+
test "A service was installed in the system." do
|
|
329
|
+
d = create_driver
|
|
330
|
+
desc = nil
|
|
331
|
+
File.open('./test/data/eventid_4697', 'r') do |f|
|
|
332
|
+
desc = f.read.gsub(/\R/, "\r\n")
|
|
333
|
+
end
|
|
334
|
+
h = {"Description" => desc}
|
|
335
|
+
expected = {"DescriptionTitle" => "A service was installed in the system.",
|
|
336
|
+
"service_information.service_account" => "LocalSystem",
|
|
337
|
+
"service_information.service_file_name" => "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup",
|
|
338
|
+
"service_information.service_name" => "WpnUserService_a46b7",
|
|
339
|
+
"service_information.service_start_type" => "2",
|
|
340
|
+
"service_information.service_type" => "0xE0",
|
|
341
|
+
"subject.account_domain" => "WORKGROUP",
|
|
342
|
+
"subject.account_name" => "824ZWL3$",
|
|
343
|
+
"subject.logon_id" => "0x3E7",
|
|
344
|
+
"subject.security_id" => "SYSTEM"}
|
|
345
|
+
d.instance.parse_desc(h)
|
|
346
|
+
assert_equal(expected, h)
|
|
347
|
+
end
|
|
348
|
+
|
|
328
349
|
def test_write
|
|
329
350
|
d = create_driver XML_RENDERING_CONFIG
|
|
330
351
|
|
metadata
CHANGED
|
@@ -1,16 +1,15 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: fluent-plugin-windows-eventlog
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.9.
|
|
4
|
+
version: 0.9.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- okahashi117
|
|
8
8
|
- Hiroshi Hatake
|
|
9
9
|
- Masahiro Nakagawa
|
|
10
|
-
autorequire:
|
|
11
10
|
bindir: bin
|
|
12
11
|
cert_chain: []
|
|
13
|
-
date:
|
|
12
|
+
date: 1980-01-02 00:00:00.000000000 Z
|
|
14
13
|
dependencies:
|
|
15
14
|
- !ruby/object:Gem::Dependency
|
|
16
15
|
name: bundler
|
|
@@ -152,6 +151,7 @@ files:
|
|
|
152
151
|
- lib/fluent/plugin/bookmark_sax_parser.rb
|
|
153
152
|
- lib/fluent/plugin/in_windows_eventlog.rb
|
|
154
153
|
- lib/fluent/plugin/in_windows_eventlog2.rb
|
|
154
|
+
- test/data/eventid_4697
|
|
155
155
|
- test/data/eventid_6416
|
|
156
156
|
- test/generate-windows-event.rb
|
|
157
157
|
- test/helper.rb
|
|
@@ -162,7 +162,6 @@ homepage: https://github.com/fluent/fluent-plugin-windows-eventlog
|
|
|
162
162
|
licenses:
|
|
163
163
|
- Apache-2.0
|
|
164
164
|
metadata: {}
|
|
165
|
-
post_install_message:
|
|
166
165
|
rdoc_options: []
|
|
167
166
|
require_paths:
|
|
168
167
|
- lib
|
|
@@ -177,11 +176,11 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
177
176
|
- !ruby/object:Gem::Version
|
|
178
177
|
version: '0'
|
|
179
178
|
requirements: []
|
|
180
|
-
rubygems_version: 3.
|
|
181
|
-
signing_key:
|
|
179
|
+
rubygems_version: 3.6.9
|
|
182
180
|
specification_version: 4
|
|
183
181
|
summary: Fluentd Input plugin to read windows event log.
|
|
184
182
|
test_files:
|
|
183
|
+
- test/data/eventid_4697
|
|
185
184
|
- test/data/eventid_6416
|
|
186
185
|
- test/generate-windows-event.rb
|
|
187
186
|
- test/helper.rb
|