com.mozilla.secops.postprocessing

Class PostProcessing

java.lang.Object

com.mozilla.secops.postprocessing.PostProcessing

All Implemented Interfaces:

Serializable

public class PostProcessing
extends Object
implements Serializable

PostProcessing implements analysis of alerts generated by other pipelines.

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	PostProcessing.Parse Parse incoming events and filter to only include events of type Alert
static interface	PostProcessing.PostProcessingOptions Runtime options for PostProcessing pipeline.
static class	PostProcessing.WatchlistAnalyze Check incoming alert events against a watchlist of various identifiers.

Field Summary

Fields

Modifier and Type	Field and Description
static String	METRICS_NAMESPACE Prefix for metrics namespace component
static String	WATCHLIST_ALERT_PROCESSING_TIME_METRIC Alert processing time for watchlist

Constructor Summary

Constructors

Constructor and Description
PostProcessing()

Method Summary

Modifier and Type	Method and Description
static String	buildConfigurationTick(PostProcessing.PostProcessingOptions options) Build a configuration tick for PostProcessing given pipeline options
static void	main(String[] args) Entry point for Beam pipeline.
static org.apache.beam.sdk.values.PCollection<Alert>	processInput(org.apache.beam.sdk.values.PCollection<String> input, PostProcessing.PostProcessingOptions options) Process input collection

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

METRICS_NAMESPACE

public static final String METRICS_NAMESPACE

Prefix for metrics namespace component

See Also:

Constant Field Values

WATCHLIST_ALERT_PROCESSING_TIME_METRIC

public static final String WATCHLIST_ALERT_PROCESSING_TIME_METRIC

Alert processing time for watchlist

See Also:

Constant Field Values

Constructor Detail

PostProcessing

public PostProcessing()

Method Detail

buildConfigurationTick

public static String buildConfigurationTick(PostProcessing.PostProcessingOptions options)
                                     throws IOException

Build a configuration tick for PostProcessing given pipeline options

Parameters:

options - Pipeline options

Returns:

String

Throws:

IOException - IOException

processInput

public static org.apache.beam.sdk.values.PCollection<Alert> processInput(org.apache.beam.sdk.values.PCollection<String> input,
                                                                         PostProcessing.PostProcessingOptions options)

Process input collection

Process collection of input events, returning a collection of alerts as required.

Parameters:

input - Input collection

options - Pipeline options

Returns:

Output collection

main

public static void main(String[] args)
                 throws Exception

Entry point for Beam pipeline.

Parameters:

args - Runtime arguments.

Throws:

Exception - Exception