com.mozilla.secops.parser

Class Raw

java.lang.Object

com.mozilla.secops.parser.PayloadBase

com.mozilla.secops.parser.Raw

All Implemented Interfaces:

Serializable

public class Raw
extends PayloadBase
implements Serializable

Raw payload data

If no matcher matches a given input, the resulting event will have a Raw payload associated with it.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
Raw() Construct matcher object.
Raw(String input, Event e, com.mozilla.secops.parser.ParserState state) Construct parser object.

Method Summary

Modifier and Type	Method and Description
String	eventStringValue(EventFilterPayload.StringProperty property) Return a given String payload field value based on the supplied field identifier
String	getRaw() Get raw string
Payload.PayloadType	getType() Get payload type.
Boolean	matcher(String input, com.mozilla.secops.parser.ParserState state) Apply matcher.

Methods inherited from class com.mozilla.secops.parser.PayloadBase

eventIntegerValue

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Raw

public Raw()

Construct matcher object.

Raw

public Raw(String input,
           Event e,
           com.mozilla.secops.parser.ParserState state)

Construct parser object.

Parameters:

input - Input string.

e - Parent Event.

state - State

Method Detail

matcher

public Boolean matcher(String input,
                       com.mozilla.secops.parser.ParserState state)

Description copied from class: PayloadBase

Apply matcher.

Overrides:

matcher in class PayloadBase

Parameters:

input - Input string.

state - ParserState

Returns:

True if matcher matches.

getType

public Payload.PayloadType getType()

Description copied from class: PayloadBase

Get payload type.

Overrides:

getType in class PayloadBase

Returns:

Payload.PayloadType

getRaw

public String getRaw()

Get raw string

Returns original event string that could not be parsed.

Returns:

Original event string

eventStringValue

public String eventStringValue(EventFilterPayload.StringProperty property)

Description copied from class: PayloadBase

Return a given String payload field value based on the supplied field identifier

Overrides:

eventStringValue in class PayloadBase

Parameters:

property - EventFilterPayload.StringProperty

Returns:

String value or null