dd-sensitive-data-scanner 0.0.0

Core Sensitive Data Scanner library for detecting and redacting sensitive information.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use crate::Labels;
use metrics::{Counter, counter};

#[derive(Clone)]
pub struct RuleMetrics {
    /// Pre-initialized counter for the fast path (debug observability disabled).
    pub false_positive_excluded_attributes: Counter,
    /// Base labels when debug observability enabled,
    /// used to attach the `sds_namespace` tag dynamically.
    pub base_labels: Labels,
}

impl RuleMetrics {
    pub fn new(labels: &Labels) -> Self {
        RuleMetrics {
            false_positive_excluded_attributes: counter!(
                "false_positive.multipass.excluded_match",
                labels.clone()
            ),
            base_labels: labels.clone(),
        }
    }
}
/*
 * Scanning metrics
 *
 * duration_ns: Total time from scan start to completion
 * num_scanned_events: Number of scanned events
 * match_count: Number of matches found
 * suppressed_match_count: Number of matches suppressed
 * cpu_duration: Time spent in CPU operations
 *
 * In case of too high cardinality, please refer to https://github.com/DataDog/logs-backend/blob/prod/domains/commons/shared/libs/telemetry/src/main/java/com/dd/metrics/RegistryCacheTags.java
 */
pub struct ScannerMetrics {
    pub num_scanned_events: Counter,
    pub match_count: Counter,
    pub suppressed_match_count: Counter,
    pub cpu_duration: Counter,
}

impl ScannerMetrics {
    pub fn new(labels: &Labels) -> Self {
        ScannerMetrics {
            num_scanned_events: counter!("scanned_events", labels.clone()),
            match_count: counter!("scanning.match_count", labels.clone()),
            suppressed_match_count: counter!("scanning.suppressed_match_count", labels.clone()),
            cpu_duration: counter!("scanning.cpu_duration", labels.clone()),
        }
    }
}