org.jwall.web.audit.filter

Class AuditEventMatch

java.lang.Object

org.jwall.audit.Match

org.jwall.web.audit.filter.AuditEventMatch

All Implemented Interfaces:

Serializable, FilterExpression

Direct Known Subclasses:

AuditEventDateMatch

public class AuditEventMatch
extends Match
implements FilterExpression

This class implements the most generic ModSecurity-like match. It matches the value of a given variable against a single or set of values using a specific operator. This implementation supports the operators

• rx, by matching the value against regular expressions
• pm, by looking for substring matches
• eq, by looking for equality of strings

All matches can be inverted by prepending an exclamation-mark "!" to the value.

Author:

Christian Bockermann <chris@jwall.org>

See Also:

Serialized Form

Field Summary

Fields inherited from class org.jwall.audit.Match

condition, NUMERIC_FIELDS, op, operator, values, variable

Constructor Summary

Constructors

Constructor and Description
AuditEventMatch()
AuditEventMatch(String variable)
AuditEventMatch(String variable, Operator op, String value)
AuditEventMatch(String variable, String value)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	matches(AuditEvent evt) Matches the expression against the given event.
Object	readResolve()
String	toXML() Returns an XML representation of this match.

Methods inherited from class org.jwall.audit.Match

getOp, getOperator, getValue, getValueObject, getVariable, setOperator, setValue, setVariable, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AuditEventMatch

public AuditEventMatch()

AuditEventMatch

public AuditEventMatch(String variable)

AuditEventMatch

public AuditEventMatch(String variable,
               String value)

AuditEventMatch

public AuditEventMatch(String variable,
               Operator op,
               String value)

Method Detail

matches

public boolean matches(AuditEvent evt)

Description copied from interface: FilterExpression

Matches the expression against the given event.

Specified by:

matches in interface FilterExpression

Returns:

See Also:

matches(org.jwall.web.audit.AuditEvent)

toXML

public String toXML()

Returns an XML representation of this match.

Overrides:

toXML in class Match

Returns:

readResolve

public Object readResolve()