Module usiem::components::parsing
source · [−]Enums
Error at parsing a log
Traits
A simple object with the logic to parse Logs.
This is the most complex type of parser. It’s statefull to store past logs. Think of the USB event in linux, we need the rest of the logs to extract all information. The Parser component which uses this parsers must be able to store and load past Logs if the user connects to a different SIEM node (LoadBalancing).