org.jwall.web.audit.processor
Class PersistentCollectionProcessor

java.lang.Object
  org.jwall.web.audit.rules.PersistentCollectionExtractor
      org.jwall.web.audit.processor.PersistentCollectionProcessor

All Implemented Interfaces:

EventProcessor<AuditEvent>, FeatureExtractor<AuditEvent,String>, stream.Processor

public class PersistentCollectionProcessor
extends PersistentCollectionExtractor
implements stream.Processor, EventProcessor<AuditEvent>

This processor extracts collections from the rule-log (i.e. section 'K' of ModSecurity events). The output of the extraction is pushed back into the event (or Data item).

Author:

Christian Bockermann <chris@jwall.org>

Field Summary

Fields inherited from interface org.jwall.audit.EventProcessor

DELETE_FLAG

Constructor Summary

PersistentCollectionProcessor()

Method Summary

String	getKey()
stream.data.Data	process(stream.data.Data data)
AuditEvent	processEvent(AuditEvent event, Map<String,Object> context) This method is called upon event reception.
void	setKey(String key)

Methods inherited from class org.jwall.web.audit.rules.PersistentCollectionExtractor

extract, extractScores, extractScores, getVariables, processRuleLog, removeQuotes

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PersistentCollectionProcessor

public PersistentCollectionProcessor()

Method Detail

getKey

public String getKey()

Returns:

the key

setKey

public void setKey(String key)

Parameters:

key - the key to set

process

public stream.data.Data process(stream.data.Data data)

Specified by:

process in interface stream.Processor

See Also:

stream.data.DataProcessor#process(stream.data.Data)

processEvent

public AuditEvent processEvent(AuditEvent event,
                               Map<String,Object> context)
                        throws Exception

Description copied from interface: EventProcessor

This method is called upon event reception. The given map provides a context to communicate data between several event-processors. The implementor of this interface needs to take care that calls to this class my come from different threads, i.e. no state should be stored in the class to diminish the risk of concurrency problems.

Specified by:

processEvent in interface EventProcessor<AuditEvent>

Returns:

Throws:

Exception