com.mozilla.secops.amo

Class AddonMatcher

java.lang.Object

org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Event>,org.apache.beam.sdk.values.PCollection<Alert>>

com.mozilla.secops.amo.AddonMatcher

All Implemented Interfaces:

DocumentingTransform, Serializable, org.apache.beam.sdk.transforms.display.HasDisplayData

public class AddonMatcher
extends org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Event>,org.apache.beam.sdk.values.PCollection<Alert>>
implements DocumentingTransform

Match abusive addon uploads and generate alerts

Processes upload log messages that include information such as the upload file name and the size of the upload. This is compared against configuration and if the criteria matches, an alert will be generated of category amo_abuse_matched_addon.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
AddonMatcher(String monitoredResource, Integer suppressRecovery, String[] matchCriteria) Construct new AddonMatcher

Method Summary

Modifier and Type	Method and Description
org.apache.beam.sdk.values.PCollection<Alert>	expand(org.apache.beam.sdk.values.PCollection<Event> col)
String	getTransformDoc() Get documentation string from transform based on it's current configuration

Methods inherited from class org.apache.beam.sdk.transforms.PTransform

compose, compose, getAdditionalInputs, getDefaultOutputCoder, getName, getResourceHints, populateDisplayData, setResourceHints, toString, validate

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

AddonMatcher

public AddonMatcher(String monitoredResource,
                    Integer suppressRecovery,
                    String[] matchCriteria)

Construct new AddonMatcher

Parameters:

monitoredResource - Monitored resource indicator

suppressRecovery - Optional recovery suppression to include with alerts in seconds

matchCriteria - Match criteria, filename_regex:minsizebytes:maxsizebytes

Method Detail

getTransformDoc

public String getTransformDoc()

Get documentation string from transform based on it's current configuration

Specified by:

getTransformDoc in interface DocumentingTransform

Returns:

String

expand

public org.apache.beam.sdk.values.PCollection<Alert> expand(org.apache.beam.sdk.values.PCollection<Event> col)

Specified by:

expand in class org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Event>,org.apache.beam.sdk.values.PCollection<Alert>>