org.jwall.web.audit.filter
Class AuditEventMatch

java.lang.Object
  org.jwall.audit.Match
      org.jwall.web.audit.filter.AuditEventMatch

All Implemented Interfaces:

Serializable, FilterExpression

Direct Known Subclasses:

AuditEventDateMatch

public class AuditEventMatch
extends Match
implements FilterExpression

This class implements the most generic ModSecurity-like match. It matches the value of a given variable against a single or set of values using a specific operator. This implementation supports the operators

• rx, by matching the value against regular expressions
• pm, by looking for substring matches
• eq, by looking for equality of strings

All matches can be inverted by prepending an exclamation-mark "!" to the value.

Author:

Christian Bockermann <chris@jwall.org>

See Also:

Serialized Form

Field Summary

Fields inherited from class org.jwall.audit.Match

NUMERIC_FIELDS

Constructor Summary

AuditEventMatch()

AuditEventMatch(String variable)

AuditEventMatch(String variable, Operator op, String value)

AuditEventMatch(String variable, String value)

Method Summary

boolean	matches(AuditEvent evt) Matches the expression against the given event.
Object	readResolve()
String	toXML() Returns an XML representation of this match.

Methods inherited from class org.jwall.audit.Match

getOp, getOperator, getValue, getValueObject, getVariable, setOperator, setValue, setVariable, toString

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AuditEventMatch

public AuditEventMatch()

AuditEventMatch

public AuditEventMatch(String variable)

AuditEventMatch

public AuditEventMatch(String variable,
                       String value)

AuditEventMatch

public AuditEventMatch(String variable,
                       Operator op,
                       String value)

Method Detail

matches

public boolean matches(AuditEvent evt)

Description copied from interface: FilterExpression

Matches the expression against the given event.

Specified by:

matches in interface FilterExpression

Returns:

See Also:

matches(org.jwall.web.audit.AuditEvent)

toXML

public String toXML()

Returns an XML representation of this match.

Overrides:

toXML in class Match

Returns:

readResolve

public Object readResolve()