Expand description
SIEM (Security Information and Event Management) integration for MockForge
This module provides integration with SIEM systems for security event monitoring and compliance. Supports multiple transport methods including Syslog, HTTP/HTTPS, File-based export, and cloud SIEM systems (Splunk, Datadog, AWS CloudWatch, GCP Logging, Azure Monitor).
Structs§
- Azure
Transport - Azure Monitor Logs transport implementation
- Cloudwatch
Transport - AWS CloudWatch Logs transport implementation
- Datadog
Transport - Datadog API transport implementation
- Event
Filter - Event filter configuration
- File
Rotation Config - File rotation configuration
- File
Transport - File transport implementation
- GcpTransport
- Google Cloud Logging transport implementation
- Http
Transport - HTTP transport implementation
- Retry
Config - Retry configuration for SIEM delivery
- Siem
Config - SIEM configuration
- Siem
Emitter - SIEM emitter that sends events to configured destinations
- Splunk
Transport - Splunk HEC (HTTP Event Collector) transport implementation
- Syslog
Transport - Syslog transport implementation
- Transport
Health - SIEM transport health status
Enums§
- Siem
Destination - SIEM destination configuration
- Siem
Protocol - SIEM protocol types
- Syslog
Facility - Syslog facility codes (RFC 5424)
- Syslog
Severity - Syslog severity levels (RFC 5424)
Traits§
- Siem
Transport - Trait for SIEM transport implementations