Comments (4)
rgbriggs
commented on June 26, 2024
This is essentially a duplicate of issue 25 and issue 35. I recommend close as duplicate.
from aushape.
spbnick
commented on June 26, 2024
@rgbriggs Hmm, I don't think I follow. To me those issues don't look related at all. Could you elaborate, please?
from aushape.
rgbriggs
commented on June 26, 2024
On 2018-03-18 06:22, Nikolai Kondrashov wrote:
@rgbriggs Hmm, I don't think I follow. To me those issues don't look
related at all. Could you elaborate, please?
Perhaps I misunderstood the goal of this issue report.
Is there work expected by the scribery/aushape team to work around this
or ignore it? Or is it to get Steve to stop the normalizer from
complaining? Or is it expected that the kernel folks resolve
ghak25/ghak35.
Now that a number of other issues have been addressed and better
understood I am optimistic ghak25/35 can be addressed which should
resolve this scribery/aushape issue.
from aushape.
spbnick
commented on June 26, 2024
I think the solution to this on aushape side should be to fail generating the normalized data, and mark the partially-converted JSON object with an error. I would, of course, like this resolved on the audit or kernel side, but I expect things like this will keep happening, so aushape will need to handle it anyway, and it can start with handling this case while it's being resolved.
from aushape.
Related Issues (20)
- Scan the code for TODO and FIXME
- Ignore or warn about event not being trimmed to the required maximum
- Consider having field value sub-fields HOT 2
- Install schemas and Elasticsearch mapping
- Add instructions on Elasticsearch forwarding to README.md
- Rename `host` field to `node` to match audit logs better HOT 1
- Implement outputting normalized audit event data
- Make parsed data output optional
- Implement Elasticsearch mapping generation
- Mention --enable-debug configure option in README.md
- Implement support for output format, which can easily be forwarded to ElasticSearch HOT 1
- Handle repeated NETFILTER_CFG records
- Some execve events are considered invalid
- Remote audit logs HOT 25
- Docker VIRT_CONTROL vm field garbage
- Support building without audit normalization API
- Implement integration tests
- aushape: error while loading shared libraries: libaushape.so.0: cannot open shared object file: No such file or directory HOT 1
- undeclared symbols on make
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aushape.