| Package | Description |
|---|---|
| org.jwall.audit | |
| org.jwall.audit.processor | |
| org.jwall.audit.rules | |
| org.jwall.log | |
| org.jwall.web.audit |
This package encapsulates the AuditEvent-framework that is used to represent,
create, manage and handle audit events within a Java environment.
|
| org.jwall.web.audit.processor | |
| org.jwall.web.audit.rules |
| Modifier and Type | Method and Description |
|---|---|
Double |
EventProcessorPipeline.getPriority(EventProcessor<E> proc) |
void |
EventProcessorPipeline.register(Double priority,
EventProcessor<E> proc)
Register a new event processor in this pipeline.
|
void |
EventProcessorPipeline.unregister(EventProcessor<E> proc)
Unregister the given processor from this pipeline.
|
| Modifier and Type | Class and Description |
|---|---|
class |
AbstractEventProcessor<E extends Event> |
class |
DefaultRequestHost
This simple event processor fills in a default host value for events that
do not come with a request header including a
Host:-field. |
class |
DNSLookup
A simple processor to enrich events by looking up the REMOTE_ADDR in the DNS
service and placing the resolved name in REMOTE_HOST.
|
class |
JavaScript |
| Modifier and Type | Class and Description |
|---|---|
class |
EventRuleEngine<E extends Event>
A simple engine that will sequentially process rules for an event.
|
| Modifier and Type | Method and Description |
|---|---|
Double |
LogMessageProcessorPipeline.getPriority(EventProcessor<LogMessage> proc) |
void |
LogMessageProcessorPipeline.register(Double priority,
EventProcessor<LogMessage> proc) |
void |
LogMessageProcessorPipeline.unregister(EventProcessor<LogMessage> proc) |
| Modifier and Type | Method and Description |
|---|---|
List<EventProcessor<AuditEvent>> |
AuditEventProcessorPipeline.getProcessors() |
| Modifier and Type | Method and Description |
|---|---|
int |
AuditEventProcessorPipeline.Priority.compare(EventProcessor<AuditEvent> arg0,
EventProcessor<AuditEvent> arg1) |
int |
AuditEventProcessorPipeline.Priority.compare(EventProcessor<AuditEvent> arg0,
EventProcessor<AuditEvent> arg1) |
Double |
AuditEventProcessorPipeline.getPriority(EventProcessor<AuditEvent> proc) |
void |
AuditEventProcessorPipeline.register(Double priority,
EventProcessor<AuditEvent> proc) |
void |
AuditEventProcessorPipeline.unregister(EventProcessor<AuditEvent> proc) |
void |
AuditEventProcessorPipeline.unregisterEventProcessor(EventProcessor<AuditEvent> p)
This method is used to unregister an event-processor from the
AuditStorage
|
| Constructor and Description |
|---|
AuditEventProcessorPipeline.Priority(Map<EventProcessor<AuditEvent>,Double> p) |
| Modifier and Type | Class and Description |
|---|---|
class |
JRubyProcessor |
class |
PersistentCollectionProcessor
This processor extracts collections from the rule-log (i.e. section 'K' of
ModSecurity events).
|
class |
RemoteAddressResolver
This processor extracts a possible original remote IP from the Http request
header and places it into the REMOTE_ADDR variable.
|
class |
RuleTagProcessor
This process simply parses the EventMessages and extracts all RULE_TAGS to
add them to the TAGS attribute.
|
class |
XForwardedForResolver
This class implements a simple resolver for X-Forwarded-For headers.
|
| Modifier and Type | Class and Description |
|---|---|
class |
AuditEventRuleEngine
A rule engine for handling audit-event data.
|
Copyright © 2013 jwall.org. All Rights Reserved.