Trait usiem::components::parsing::LogParser
source · pub trait LogParser: DynClone + Send {
fn parse_log(
&self,
log: SiemLog,
datasets: &DatasetHolder
) -> Result<SiemLog, LogParsingError>;
fn name(&self) -> &str;
fn description(&self) -> &str;
fn schema(&self) -> &'static FieldSchema;
fn generator(&self) -> Box<dyn LogGenerator>;
}
Expand description
A simple object with the logic to parse Logs.
Required Methods
sourcefn parse_log(
&self,
log: SiemLog,
datasets: &DatasetHolder
) -> Result<SiemLog, LogParsingError>
fn parse_log(
&self,
log: SiemLog,
datasets: &DatasetHolder
) -> Result<SiemLog, LogParsingError>
Parse the log. If it fails it must give a reason why. This allow optimization of the parsing process.
sourcefn description(&self) -> &str
fn description(&self) -> &str
Description of the parser
sourcefn schema(&self) -> &'static FieldSchema
fn schema(&self) -> &'static FieldSchema
Get parser schema
sourcefn generator(&self) -> Box<dyn LogGenerator>
fn generator(&self) -> Box<dyn LogGenerator>
Get a log generator to test this parser