42 lines
901 B
Go
42 lines
901 B
Go
package parser
|
|
|
|
import (
|
|
"io/ioutil"
|
|
|
|
"github.com/crowdsecurity/crowdsec/pkg/types"
|
|
"github.com/logrusorgru/grokky"
|
|
"github.com/prometheus/common/log"
|
|
)
|
|
|
|
type UnixParser struct {
|
|
}
|
|
|
|
type UnixParserCtx struct {
|
|
Grok grokky.Host
|
|
Stages []string
|
|
Profiling bool
|
|
DataFolder string
|
|
}
|
|
|
|
func (u UnixParser) IsParsable(ctx interface{}, l types.Line) (bool, error) {
|
|
return true, nil
|
|
}
|
|
|
|
func (u UnixParser) Init(c map[string]interface{}) (*UnixParserCtx, error) {
|
|
r := UnixParserCtx{}
|
|
r.Grok = grokky.NewBase()
|
|
files, err := ioutil.ReadDir(c["patterns"].(string))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
r.DataFolder = c["data"].(string)
|
|
for _, f := range files {
|
|
log.Debugf("Loading %s", f.Name())
|
|
if err := r.Grok.AddFromFile(c["patterns"].(string) + f.Name()); err != nil {
|
|
log.Errorf("failed to load pattern %s : %v", f.Name(), err)
|
|
return nil, err
|
|
}
|
|
}
|
|
return &r, nil
|
|
}
|