HEX

Warning: set_time_limit() [function.set-time-limit]: Cannot set time limit - prohibited by configuration in /home/u547966/brikov.ru/www/wp-content/plugins/admin-menu-editor/menu-editor.php on line 745
Server: Apache
System: Linux 4.19.0-0.bpo.9-amd64 x86_64 at red40
User: u547966 (5490)
PHP: 5.3.29-mh2
Disabled: syslog, dl, popen, proc_open, proc_nice, proc_get_status, proc_close, proc_terminate, posix_mkfifo, chown, chgrp, accelerator_reset, opcache_reset, accelerator_get_status, opcache_get_status, pcntl_alarm, pcntl_fork, pcntl_waitpid, pcntl_wait, pcntl_wifexited, pcntl_wifstopped, pcntl_wifsignaled, pcntl_wifcontinued, pcntl_wexitstatus, pcntl_wtermsig, pcntl_wstopsig, pcntl_signal, pcntl_signal_dispatch, pcntl_get_last_error, pcntl_strerror, pcntl_sigprocmask, pcntl_sigwaitinfo, pcntl_sigtimedwait, pcntl_exec, pcntl_getpriority, pcntl_setpriority
Upload Files
File: //usr/share/filebeat/module/google_workspace/drive/config/pipeline.js
// Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
// or more contributor license agreements. Licensed under the Elastic License;
// you may not use this file except in compliance with the Elastic License.

var drive = (function () {
    var path = require("path");
    var processor = require("processor");

    var categorizeEvent = function(evt) {
        evt.Put("event.category", ["file"]);
        switch (evt.Get("event.action")) {
            case "add_to_folder":
            case "edit":
            case "add_lock":
            case "move":
            case "remove_from_folder":
            case "rename":
            case "remove_lock":
            case "sheets_import_range":
                evt.Put("event.type", ["change"]);
                break;
            case "approval_canceled":
            case "approval_comment_added":
            case "approval_requested":
            case "approval_reviewer_responded":
            case "change_acl_editors":
            case "change_document_access_scope":
            case "change_document_visibility":
            case "shared_drive_membership_change":
            case "shared_drive_settings_change":
            case "sheets_import_range_access_change":
            case "change_user_access":
                evt.AppendTo("event.category", "iam");
                evt.AppendTo("event.category", "configuration");
                evt.Put("event.type", ["change"]);
                break;
            case "create":
            case "untrash":
            case "upload":
                evt.Put("event.type", ["creation"]);
                break;
            case "delete":
            case "trash":
                evt.Put("event.type", ["deletion"]);
                break;
            case "download":
            case "preview":
            case "print":
            case "view":
                evt.Put("event.type", ["info"]);
                break;
        }
    };

    var getParamValue = function(param) {
        if (param.value) {
            return param.value;
        }
        if (param.multiValue) {
            return param.multiValue;
        }
        if (param.boolValue !== null) {
            return param.boolValue;
        }
    };

    var flattenParams = function(evt) {
        var params = evt.Get("json.events.parameters");
        if (!params || !Array.isArray(params)) {
            return;
        }

        params.forEach(function(p){
            evt.Put("google_workspace.drive."+p.name, getParamValue(p));
        });

        evt.Delete("json.events.parameters");
    };

    var setFileInfo = function(evt) {
        var type = evt.Get("google_workspace.drive.file.type");
        if (!type) {
            return;
        }

        switch (type) {
            case "folder":
            case "shared_drive":
                evt.Put("file.type", "dir");
                break;
            default:
                evt.Put("file.type", "file");
        }

        // path returns extensions with a preceding ., e.g.: .tmp, .png
        // according to ecs the expected format is without it, so we need to remove it.
        var ext = path.extname(evt.Get("file.name"));
        if (!ext) {
            return;
        }

        if (ext.charAt(0) === ".") {
            ext = ext.substr(1);
        }
        evt.Put("file.extension", ext);
    };

    var setOwnerInfo = function(evt) {
        var email = evt.Get("google_workspace.drive.file.owner.email");
        if (!email) {
            return;
        }

        var data = email.split("@");
        if (data.length !== 2) {
            return;
        }

        evt.Put("file.owner", data[0]);
        evt.AppendTo("related.user", data[0]);
    };

    var setTargetRelatedUser = function(evt) {
        var email = evt.Get("google_workspace.drive.target");
        if (!email) {
            return;
        }

        var data = email.split("@");
        if (data.length !== 2) {
            return;
        }

        evt.AppendTo("related.user", data[0]);
    };

    var pipeline = new processor.Chain()
        .Add(categorizeEvent)
        .Add(flattenParams)
        .Convert({
            fields: [
                {
                    from: "google_workspace.drive.doc_id",
                    to: "google_workspace.drive.file.id",
                },
                {
                    from: "google_workspace.drive.doc_title",
                    to: "file.name",
                },
                {
                    from: "google_workspace.drive.doc_type",
                    to: "google_workspace.drive.file.type",
                },
                {
                    from: "google_workspace.drive.owner",
                    to: "google_workspace.drive.file.owner.email",
                },
                {
                    from: "google_workspace.drive.owner_is_shared_drive",
                    to: "google_workspace.drive.file.owner.is_shared_drive",
                },
                {
                    from: "google_workspace.drive.new_settings_state",
                    to: "google_workspace.drive.new_value",
                },
                {
                    from: "google_workspace.drive.old_settings_state",
                    to: "google_workspace.drive.old_value",
                },
                {
                    from: "google_workspace.drive.target_user",
                    to: "google_workspace.drive.target",
                },
            ],
            mode: "rename",
            ignore_missing: true,
            fail_on_error: false,
        })
        .Add(setFileInfo)
        .Add(setOwnerInfo)
        .Add(setTargetRelatedUser)
        .Build();

    return {
        process: pipeline.Run,
    };
}());

function process(evt) {
    return drive.process(evt);
}