com.mozilla.secops.awsbehavior

Class AwsBehavior.ParseAndWindow

java.lang.Object

org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<String>,org.apache.beam.sdk.values.PCollection<Event>>

com.mozilla.secops.awsbehavior.AwsBehavior.ParseAndWindow

All Implemented Interfaces:

Serializable, org.apache.beam.sdk.transforms.display.HasDisplayData

Enclosing class:

AwsBehavior

public static class AwsBehavior.ParseAndWindow
extends org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<String>,org.apache.beam.sdk.values.PCollection<Event>>

Transform to parse a PCollection containing events as strings and emit a PCollection of Event objects after filtering out events that are not Cloudtrail events

The output is windowed in the global window with a trigger which fires every 10 seconds.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
ParseAndWindow(AwsBehavior.AwsBehaviorOptions options) Static initializer for AwsBehavior.ParseAndWindow using specified pipeline options

Method Summary

Modifier and Type	Method and Description
org.apache.beam.sdk.values.PCollection<Event>	expand(org.apache.beam.sdk.values.PCollection<String> col)

Methods inherited from class org.apache.beam.sdk.transforms.PTransform

compose, compose, getAdditionalInputs, getDefaultOutputCoder, getName, getResourceHints, populateDisplayData, setResourceHints, toString, validate

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

ParseAndWindow

public ParseAndWindow(AwsBehavior.AwsBehaviorOptions options)

Static initializer for AwsBehavior.ParseAndWindow using specified pipeline options

Parameters:

options - Pipeline options

Method Detail

expand

public org.apache.beam.sdk.values.PCollection<Event> expand(org.apache.beam.sdk.values.PCollection<String> col)

Specified by:

expand in class org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<String>,org.apache.beam.sdk.values.PCollection<Event>>