ca06bc0b53
A static token at the beginning of a log line can help systems parse logs better. For example, rsyslog and syslog-ng will recognize the '@cee: ' prefix and will parse the rest of the line as a valid json message. This is useful in environments where there is a mix of structured and unstructured logs.
46 lines
858 B
Go
46 lines
858 B
Go
package audit
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
)
|
|
|
|
// JSONFormatWriter is an AuditFormatWriter implementation that structures data into
|
|
// a JSON format.
|
|
type JSONFormatWriter struct {
|
|
Prefix string
|
|
}
|
|
|
|
func (f *JSONFormatWriter) WriteRequest(w io.Writer, req *AuditRequestEntry) error {
|
|
if req == nil {
|
|
return fmt.Errorf("request entry was nil, cannot encode")
|
|
}
|
|
|
|
if len(f.Prefix) > 0 {
|
|
_, err := w.Write([]byte(f.Prefix))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
enc := json.NewEncoder(w)
|
|
return enc.Encode(req)
|
|
}
|
|
|
|
func (f *JSONFormatWriter) WriteResponse(w io.Writer, resp *AuditResponseEntry) error {
|
|
if resp == nil {
|
|
return fmt.Errorf("response entry was nil, cannot encode")
|
|
}
|
|
|
|
if len(f.Prefix) > 0 {
|
|
_, err := w.Write([]byte(f.Prefix))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
enc := json.NewEncoder(w)
|
|
return enc.Encode(resp)
|
|
}
|