See: Description
| Interface | Description |
|---|---|
| FilterExpression |
This interface defines a simple or complex filter expression.
|
| Class | Description |
|---|---|
| AuditEventDateMatch |
This class implements a date match of an event.
|
| AuditEventFilter | |
| AuditEventMatch |
This class implements the most generic ModSecurity-like match.
|
| ExpressionReader | |
| FilterCompiler | |
| FilterExpressionList |
Implements a complex expression which ORs or ANDs multiple single filter
expressions into one.
|
| Enum | Description |
|---|---|
| BooleanOperator | |
| Operator |
An enumeration of available operators.
|
| Exception | Description |
|---|---|
| FilterException |
The filter package provides two simple classes/interfaces to construct filters: the AuditEventMatch interface and the AuditEventFilter class.
The AuditEventMatch interface encapsulates and atomic checker-component for checking
a particular property of an event. Matches can range from simple property matches, e.g.
comparing the Host header, to more sophisticated things like event-id lists.
The filter class usually combines several matches into one "filter rule" and is uses these matches to do the filtering. An event usually matches a filter instance, if all matches are fulfilled.
Copyright © 2014 jwall.org. All Rights Reserved.