torizon_audit 0.0.7 → 0.0.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81e7af01773e1433fc7489de22aefafd31c56ad3fb12cca4dd310152ce80026d
-  data.tar.gz: f0a52dd55c34c9d3e8ce31ccda1eb5f897c7bc51b96d7fdc8d784b7ec5b2c5f7
+  metadata.gz: 2c50971c4656b798f91fc6c5425f9980f87e787dfee2c298c96621935b505923
+  data.tar.gz: dffd561304c72e55c5d0d77abc578fc27aeed8c387de97579c6dd186fd719032
 SHA512:
-  metadata.gz: f79fd5c4a081a9a118f6750780d9f1b5d678c96c67f1a44d473c90c63c9604de2ebb1ce585548ec4a6f3dc84f0b3822aa04edcda0085178f7ebc252ce25dc723
-  data.tar.gz: 9314b8818b0d597fc72261d4bfca3d9dbf154cb8ff32ce9a84998218f6846b7573f9a9d48c8cc24192ba409556c3edae879c068c95dd3b3de89c0f548d660c7c
+  metadata.gz: e7081b8c8313196678c72f38c70963a4e8cce844ed0ec35c89b94714206556e927319cab3ca36f5007e6178c252c2aa1383dd6bc247f082b047969222d466f3c
+  data.tar.gz: 26cb791aef470cae8b5def32a70f25d5a235989fef4b721105b687c97c52ccfc2ccc619cc3980cd9a8f70cde5b6b593599bce39ce5652219954dc69a81403566

data/lib/torizon_audit.rb

@@ -128,20 +128,24 @@ class Audit
     actions =  response["hits"]["hits"].map{ |obj|
       src = obj["_source"]
       {
-        "method" => src.key?("request_method") ? src["request_method"] : "",
-        "path" => src.key?("uri") ? src["uri"]: "",
-        "at" => src.key?("@timestamp") ? src["@timestamp"]: "",
-        "namespace" => src.key?("namespace") ? src["namespace"]: "",
-        "origin_namespace" => src.key?("origin_namespace") ? src["origin_namespace"]: "",
-        "status_code" => src.key?("status") ? src["status"]: "",
-        "ip" => src.key?("client_addr") ? src["client_addr"]: "",
-        "query" => src.key?("query_string") ? src["query_string"]: "",
-        "log_id" => obj.key?("_id") ? obj["_id"]: "",
-        "action" => self.findAction(src.key?("request_method") ? src["request_method"] : "", src.key?("uri") ? src["uri"]: "")
+        "time" => DateTime.parse(src.key?("@timestamp") ? src["@timestamp"]: ""),
+        "host" => "app.torizon.io",
+        "source" => "torizon",
+        "event" => {
+          "path" => src.key?("uri") ? src["uri"]: "",
+          "method" => src.key?("request_method") ? src["request_method"] : "",
+          "namespace" => src.key?("namespace") ? src["namespace"]: "",
+          "origin_namespace" => src.key?("origin_namespace") ? src["origin_namespace"]: "",
+          "status_code" => src.key?("status") ? src["status"]: "",
+          "ip" => src.key?("client_addr") ? src["client_addr"]: "",
+          "query" => src.key?("query_string") ? src["query_string"]: "",
+          "log_id" => obj.key?("_id") ? obj["_id"]: "",
+          "action" => self.findAction(src.key?("request_method") ? src["request_method"] : "", src.key?("uri") ? src["uri"]: "")
+        }
       }
     }
     if dropUnknownActions
-      return actions.select{|req| req["action"]  != "Unknown Action"} 
+      return actions.select{|req| req["event"]["action"]  != "Unknown Action"} 
     end
     return actions
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: torizon_audit
 version: !ruby/object:Gem::Version
-  version: 0.0.7
+  version: 0.0.8
 platform: ruby
 authors:
 - Ben Clouser
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-03-24 00:00:00.000000000 Z
+date: 2023-03-31 00:00:00.000000000 Z
 dependencies: []
 description: Fetch user actions from torizon platform
 email: ben.clouser@toradex.com