Package org.jwall.web.audit.io

Examples of org.jwall.web.audit.io.AuditEventReader

43
44
45
46
47
48
49
50
51
 
  @Before
  public void setUp() throws Exception {
    URL url = ParserBugConsole8Test.class.getResource( "/CONSOLE-58-audit.log" );
        log.info( "Audit-ScriptEvent-Log: {}", url );
    AuditEventReader reader = new ModSecurity2AuditReader( url.openStream() );
    event = reader.readNext();
    Assert.assertNotNull( event );
  }
View Full Code Here
62
63
64
65
66
67
68
69
70
71
72
73
  @Test
  public void testRuleID2() throws Exception {
   
    File test = new File( "/Users/chris/audit/larry-bugs/rule-id-audit.log" );
    if( test.canRead() ){
      AuditEventReader reader = new ModSecurity2AuditReader( test );
      event = reader.readNext();
      log.info( "ScriptEvent is: {}", event.getEventId() );
      AuditEventRule rule = new AuditEventRule();
      rule.add( new ConditionEQ( "RULE_ID", "113" ) );
      rule.add( new MockAction() );
      Assert.assertTrue( rule.matches( event, null ) );
View Full Code Here
223
224
225
226
227
228
229
230
231
232
233
234
235
    this.port = port;
  }

  public static void main(String[] args) throws Exception {

    AuditEventReader reader = new ModSecurity2AuditReader(new File(
        "/Users/chris/audit/jwall-audit.log"));
    AuditEvent evt = reader.readNext();
    GELFSender sender = new GELFSender();
    sender.setAddress("127.0.0.1");
    sender.setPort(9105);

    sender.processEvent(evt, new HashMap<String, Object>());
View Full Code Here
363
364
365
366
367
368
369
370
371
372
373
    }

    public static AuditEventReader createReader( String f, boolean tail ) throws Exception {

        System.out.println("Creating AuditEventReader from " + f );
        AuditEventReader reader = null;

        File logFile = new File( f );
        int fmt = AuditFormat.guessFormat( logFile );

        if( fmt == AuditFormat.APACHE_ACCESS_LOG )
View Full Code Here
469
470
471
472
473
474
475
476
477
478
479
                System.setProperty( PROPERTY_LOG_FILE, ( new File( args[ args.length - 1 ] ) ).getAbsolutePath() );



            File logFile = new File( System.getProperty( PROPERTY_LOG_FILE ) );
            AuditEventReader reader = AuditFormat.createReader( logFile.getAbsolutePath(), false );

            if( reader == null )
                throw new Exception( "The log-file format is not supported!" );

            RFICollector col = new RFICollector( System.getProperties() );
View Full Code Here
135
136
137
138
139
140
141
142
143
144
145
        if( "true".equals( p.getProperty( Collector.COLLECTOR_SEND_COMPLETE_LOG ) ) ){
            System.err.println( "Sending all audit-log entries!" );
            tail = false;
        }

        AuditEventReader src = null;

        if( "stdin".equals( p.getProperty( COLLECTOR_SERIAL_LOG ) ) ){
            System.out.println( "Reading from standard input..." );
            src = new ModSecurity2AuditReader( System.in, true );
            return src;
View Full Code Here
380
381
382
383
384
385
386
387
388
389
390
            boolean ok = checkProperties(pf);
            if( ! ok ){
                log.info("Error in configuration.");
            }

            AuditEventReader src = createAuditEventReader();
            if( src == null ){
                log.info("  Error: No valid audit-event-source specified!");
                log.info("  Error: Please check your config and try again.");
                System.exit(-1);
            }
View Full Code Here
144
145
146
147
148
149
150
151
152
153
154
                auth = new SimplePasswordAuthenticator(users, new Properties() );
            }

            skip = 1;

            AuditEventReader r = null;
            int format = AuditFormat.guessFormat( auditFile );

            if( format == AuditFormat.APACHE_ACCESS_LOG )
                r = new AccessLogAuditReader( auditFile, skip > 0 );
View Full Code Here
TOP

Related Classes of org.jwall.web.audit.io.AuditEventReader

  • org.jwall.AuditServer
  • org.jwall.Collector
  • org.jwall.web.audit.AuditEventDatabaseMock
  • org.jwall.web.audit.filter.AuditEventVariableMatchTest
  • org.jwall.web.audit.filter.FilterTest
  • org.jwall.web.audit.GELFSender
  • org.jwall.web.audit.RuleIDParseTest
  • org.jwall.web.audit.rules.AgeVariableTest
  • org.jwall.web.audit.rules.EventRuleConditionTests
  • org.jwall.web.audit.rules.EventRuleTest
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.