struct

ECS::LogEntry::Observer

Inherits JSON::Serializable < Struct < Value < Object

Constructors

new(pull : JSON::PullParser)
Source
new

Initialize all values as nil

Source
new(*, __pull_for_json_serializable pull : JSON::PullParser)
Source

Instance methods

egress(new_value : Hash(String, String))

A chainable setter for egress

Source
egress(value : Egress)

A chainable setter for egress

Source
egress

observer.egress

Observer.egress holds information like interface number and name, vlan, and zone information to classify egress traffic. Single armed monitoring such as a network sensor on a span port should only use observer.ingress to categorize traffic.

Level: Extended Type: Object Object Type: Keyword

Source
egress

Initialize a new Egress, yield it to the block

Source
egress=(egress : Hash(String, String) | Nil)

observer.egress

Observer.egress holds information like interface number and name, vlan, and zone information to classify egress traffic. Single armed monitoring such as a network sensor on a span port should only use observer.ingress to categorize traffic.

Level: Extended Type: Object Object Type: Keyword

Source
egress=(egress : Egress | Nil)
Source
geo(value : Geo)

A chainable setter for geo

Source
geo

Initialize a new Geo, yield it to the block

Source
geo=(geo : Geo | Nil)
Source
hostname(new_value : String)

A chainable setter for hostname

Source
hostname

observer.hostname

Hostname of the observer.

Level: Core Type: Keyword

Source
hostname=(hostname : String | Nil)

observer.hostname

Hostname of the observer.

Level: Core Type: Keyword

Source
ingress(new_value : Hash(String, String))

A chainable setter for ingress

Source
ingress(value : Ingress)

A chainable setter for ingress

Source
ingress

observer.ingress

Observer.ingress holds information like interface number and name, vlan, and zone information to classify ingress traffic. Single armed monitoring such as a network sensor on a span port should only use observer.ingress to categorize traffic.

Level: Extended Type: Object Object Type: Keyword

Source
ingress

Initialize a new Ingress, yield it to the block

Source
ingress=(ingress : Hash(String, String) | Nil)

observer.ingress

Observer.ingress holds information like interface number and name, vlan, and zone information to classify ingress traffic. Single armed monitoring such as a network sensor on a span port should only use observer.ingress to categorize traffic.

Level: Extended Type: Object Object Type: Keyword

Source
ingress=(ingress : Ingress | Nil)
Source
ip(new_value : String)

A chainable setter for ip

Source
ip

observer.ip

IP addresses of the observer.

Level: Core Type: IP

Source
ip=(ip : String | Nil)

observer.ip

IP addresses of the observer.

Level: Core Type: IP

Source
mac(new_value : String)

A chainable setter for mac

Source
mac

observer.mac

MAC addresses of the observer

Level: Core Type: Keyword

Source
mac=(mac : String | Nil)

observer.mac

MAC addresses of the observer

Level: Core Type: Keyword

Source
name(new_value : String)

A chainable setter for name

Source
name

observer.name

Custom name of the observer.

This is a name that can be given to an observer. This can be helpful for example if multiple firewalls of the same model are used in an organization.

If no custom name is needed, the field can be left empty.

Level: Extended Type: Keyword Example:

1_proxySG
Source
name=(name : String | Nil)

observer.name

Custom name of the observer.

This is a name that can be given to an observer. This can be helpful for example if multiple firewalls of the same model are used in an organization.

If no custom name is needed, the field can be left empty.

Level: Extended Type: Keyword Example:

1_proxySG
Source
os(value : Os)

A chainable setter for os

Source
os

Initialize a new Os, yield it to the block

Source
os=(os : Os | Nil)
Source
product(new_value : String)

A chainable setter for product

Source
product

observer.product

The product name of the observer.

Level: Extended Type: Keyword Example:

s200
Source
product=(product : String | Nil)

observer.product

The product name of the observer.

Level: Extended Type: Keyword Example:

s200
Source
serial_number(new_value : String)

A chainable setter for serial_number

Source
serial_number

observer.serial_number

Observer serial number.

Level: Extended Type: Keyword

Source
serial_number=(serial_number : String | Nil)

observer.serial_number

Observer serial number.

Level: Extended Type: Keyword

Source
type(new_value : String)

A chainable setter for type

Source
type

observer.type

The type of the observer the data is coming from.

There is no predefined list of observer types. Some examples are forwarder, firewall, ids, ips, proxy, poller, sensor, APM server.

Level: Core Type: Keyword Example:

firewall
Source
type=(type : String | Nil)

observer.type

The type of the observer the data is coming from.

There is no predefined list of observer types. Some examples are forwarder, firewall, ids, ips, proxy, poller, sensor, APM server.

Level: Core Type: Keyword Example:

firewall
Source
vendor(new_value : String)

A chainable setter for vendor

Source
vendor

observer.vendor

Vendor name of the observer.

Level: Core Type: Keyword Example:

Symantec
Source
vendor=(vendor : String | Nil)

observer.vendor

Vendor name of the observer.

Level: Core Type: Keyword Example:

Symantec
Source
version(new_value : String)

A chainable setter for version

Source
version

observer.version

Observer version.

Level: Core Type: Keyword

Source
version=(version : String | Nil)

observer.version

Observer version.

Level: Core Type: Keyword

Source

Nested types