com.mozilla.secops.gatekeeper

Class ETDTransforms.SuppressAlerts

java.lang.Object

org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Alert>,org.apache.beam.sdk.values.PCollection<Alert>>

com.mozilla.secops.gatekeeper.ETDTransforms.SuppressAlerts

All Implemented Interfaces:

Serializable, org.apache.beam.sdk.transforms.display.HasDisplayData

Enclosing class:

ETDTransforms

public static class ETDTransforms.SuppressAlerts
extends org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Alert>,org.apache.beam.sdk.values.PCollection<Alert>>

Suppress Alerts for repeated Event Threat Detection Findings.

We will define a "repeated finding" in ETD to mean that the source project number, the rule which triggered the finding, the technique, and indicator must be the same, as well as some fields which are not present for every rule e.g. location

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
SuppressAlerts(ETDTransforms.Options opts) static initializer for alert suppression

Method Summary

Modifier and Type	Method and Description
org.apache.beam.sdk.values.PCollection<Alert>	expand(org.apache.beam.sdk.values.PCollection<Alert> input)

Methods inherited from class org.apache.beam.sdk.transforms.PTransform

compose, compose, getAdditionalInputs, getDefaultOutputCoder, getName, getResourceHints, populateDisplayData, setResourceHints, toString, validate

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

SuppressAlerts

public SuppressAlerts(ETDTransforms.Options opts)

static initializer for alert suppression

Parameters:

opts - ETDTransforms.Options pipeline options

Method Detail

expand

public org.apache.beam.sdk.values.PCollection<Alert> expand(org.apache.beam.sdk.values.PCollection<Alert> input)

Specified by:

expand in class org.apache.beam.sdk.transforms.PTransform<org.apache.beam.sdk.values.PCollection<Alert>,org.apache.beam.sdk.values.PCollection<Alert>>