Package com.floragunn.searchguard.auditlog.impl

Class AuditLogImpl

java.lang.Object

com.floragunn.searchguard.auditlog.impl.AbstractAuditLog

com.floragunn.searchguard.auditlog.impl.AuditLogImpl

All Implemented Interfaces:

com.floragunn.searchguard.auditlog.AuditLog, Closeable, AutoCloseable

public final class AuditLogImpl
extends AbstractAuditLog

Nested Class Summary

Nested classes/interfaces inherited from interface com.floragunn.searchguard.auditlog.AuditLog

com.floragunn.searchguard.auditlog.AuditLog.Operation, com.floragunn.searchguard.auditlog.AuditLog.Origin

Field Summary

Fields inherited from class com.floragunn.searchguard.auditlog.impl.AbstractAuditLog

clusterService, log, logRequestBody, resolveBulkRequests, resolveIndices, resolver, restAuditingEnabled, settings, threadPool, transportAuditingEnabled

Constructor Summary

Constructors

Constructor	Description
AuditLogImpl(org.elasticsearch.common.settings.Settings settings, Path configPath, org.elasticsearch.client.Client clientProvider, org.elasticsearch.threadpool.ThreadPool threadPool, org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver, org.elasticsearch.cluster.service.ClusterService clusterService)

Method Summary

Modifier and Type	Method	Description
void	close()
void	logBadHeaders(org.elasticsearch.rest.RestRequest request)
void	logBadHeaders(org.elasticsearch.transport.TransportRequest request, String action, org.elasticsearch.tasks.Task task)
void	logBlockedIp(org.elasticsearch.rest.RestRequest request, InetSocketAddress remoteAddress)
void	logBlockedIp(org.elasticsearch.transport.TransportRequest request, String action, org.elasticsearch.common.transport.TransportAddress remoteAddress, org.elasticsearch.tasks.Task task)
void	logBlockedUser(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.rest.RestRequest request)
void	logBlockedUser(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.transport.TransportRequest request, org.elasticsearch.tasks.Task task)
void	logDocumentDeleted(org.elasticsearch.index.shard.ShardId shardId, org.elasticsearch.index.engine.Engine.Delete delete, org.elasticsearch.index.engine.Engine.DeleteResult result)
void	logDocumentRead(String index, String id, org.elasticsearch.index.shard.ShardId shardId, Map<String,String> fieldNameValues, com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)
void	logDocumentWritten(org.elasticsearch.index.shard.ShardId shardId, org.elasticsearch.index.get.GetResult originalResult, org.elasticsearch.index.engine.Engine.Index currentIndex, org.elasticsearch.index.engine.Engine.IndexResult result, com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)
void	logFailedLogin(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.rest.RestRequest request)
void	logFailedLogin(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.transport.TransportRequest request, org.elasticsearch.tasks.Task task)
void	logGrantedPrivileges(String privilege, org.elasticsearch.transport.TransportRequest request, org.elasticsearch.tasks.Task task)
void	logImmutableIndexAttempt(org.elasticsearch.transport.TransportRequest request, String action, org.elasticsearch.tasks.Task task)
void	logMissingPrivileges(String privilege, String effectiveUser, org.elasticsearch.rest.RestRequest request)
void	logMissingPrivileges(String privilege, org.elasticsearch.transport.TransportRequest request, org.elasticsearch.tasks.Task task)
void	logSgIndexAttempt(org.elasticsearch.transport.TransportRequest request, String action, org.elasticsearch.tasks.Task task)
void	logSSLException(org.elasticsearch.rest.RestRequest request, Throwable t)
void	logSSLException(org.elasticsearch.transport.TransportRequest request, Throwable t, String action, org.elasticsearch.tasks.Task task)
void	logSucceededLogin(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.rest.RestRequest request)
void	logSucceededLogin(String effectiveUser, boolean sgadmin, String initiatingUser, org.elasticsearch.transport.TransportRequest request, String action, org.elasticsearch.tasks.Task task)
protected void	save(AuditMessage msg)
void	setComplianceConfig(com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)

Methods inherited from class com.floragunn.searchguard.auditlog.impl.AbstractAuditLog

logExternalConfig

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuditLogImpl

public AuditLogImpl(org.elasticsearch.common.settings.Settings settings,
                    Path configPath,
                    org.elasticsearch.client.Client clientProvider,
                    org.elasticsearch.threadpool.ThreadPool threadPool,
                    org.elasticsearch.cluster.metadata.IndexNameExpressionResolver resolver,
                    org.elasticsearch.cluster.service.ClusterService clusterService)

Method Detail

setComplianceConfig

public void setComplianceConfig(com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)

close

public void close()
           throws IOException

Throws:

IOException

save

protected void save(AuditMessage msg)

Specified by:

save in class AbstractAuditLog

logFailedLogin

public void logFailedLogin(String effectiveUser,
                           boolean sgadmin,
                           String initiatingUser,
                           org.elasticsearch.transport.TransportRequest request,
                           org.elasticsearch.tasks.Task task)

Specified by:

logFailedLogin in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logFailedLogin in class AbstractAuditLog

logFailedLogin

public void logFailedLogin(String effectiveUser,
                           boolean sgadmin,
                           String initiatingUser,
                           org.elasticsearch.rest.RestRequest request)

Specified by:

logFailedLogin in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logFailedLogin in class AbstractAuditLog

logBlockedUser

public void logBlockedUser(String effectiveUser,
                           boolean sgadmin,
                           String initiatingUser,
                           org.elasticsearch.transport.TransportRequest request,
                           org.elasticsearch.tasks.Task task)

Specified by:

logBlockedUser in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBlockedUser in class AbstractAuditLog

logBlockedUser

public void logBlockedUser(String effectiveUser,
                           boolean sgadmin,
                           String initiatingUser,
                           org.elasticsearch.rest.RestRequest request)

Specified by:

logBlockedUser in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBlockedUser in class AbstractAuditLog

logSucceededLogin

public void logSucceededLogin(String effectiveUser,
                              boolean sgadmin,
                              String initiatingUser,
                              org.elasticsearch.transport.TransportRequest request,
                              String action,
                              org.elasticsearch.tasks.Task task)

Specified by:

logSucceededLogin in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logSucceededLogin in class AbstractAuditLog

logSucceededLogin

public void logSucceededLogin(String effectiveUser,
                              boolean sgadmin,
                              String initiatingUser,
                              org.elasticsearch.rest.RestRequest request)

Specified by:

logSucceededLogin in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logSucceededLogin in class AbstractAuditLog

logMissingPrivileges

public void logMissingPrivileges(String privilege,
                                 String effectiveUser,
                                 org.elasticsearch.rest.RestRequest request)

Specified by:

logMissingPrivileges in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logMissingPrivileges in class AbstractAuditLog

logMissingPrivileges

public void logMissingPrivileges(String privilege,
                                 org.elasticsearch.transport.TransportRequest request,
                                 org.elasticsearch.tasks.Task task)

Specified by:

logMissingPrivileges in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logMissingPrivileges in class AbstractAuditLog

logGrantedPrivileges

public void logGrantedPrivileges(String privilege,
                                 org.elasticsearch.transport.TransportRequest request,
                                 org.elasticsearch.tasks.Task task)

Specified by:

logGrantedPrivileges in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logGrantedPrivileges in class AbstractAuditLog

logBadHeaders

public void logBadHeaders(org.elasticsearch.transport.TransportRequest request,
                          String action,
                          org.elasticsearch.tasks.Task task)

Specified by:

logBadHeaders in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBadHeaders in class AbstractAuditLog

logBadHeaders

public void logBadHeaders(org.elasticsearch.rest.RestRequest request)

Specified by:

logBadHeaders in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBadHeaders in class AbstractAuditLog

logBlockedIp

public void logBlockedIp(org.elasticsearch.transport.TransportRequest request,
                         String action,
                         org.elasticsearch.common.transport.TransportAddress remoteAddress,
                         org.elasticsearch.tasks.Task task)

Specified by:

logBlockedIp in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBlockedIp in class AbstractAuditLog

logBlockedIp

public void logBlockedIp(org.elasticsearch.rest.RestRequest request,
                         InetSocketAddress remoteAddress)

Specified by:

logBlockedIp in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logBlockedIp in class AbstractAuditLog

logSgIndexAttempt

public void logSgIndexAttempt(org.elasticsearch.transport.TransportRequest request,
                              String action,
                              org.elasticsearch.tasks.Task task)

Specified by:

logSgIndexAttempt in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logSgIndexAttempt in class AbstractAuditLog

logImmutableIndexAttempt

public void logImmutableIndexAttempt(org.elasticsearch.transport.TransportRequest request,
                                     String action,
                                     org.elasticsearch.tasks.Task task)

Specified by:

logImmutableIndexAttempt in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logImmutableIndexAttempt in class AbstractAuditLog

logSSLException

public void logSSLException(org.elasticsearch.transport.TransportRequest request,
                            Throwable t,
                            String action,
                            org.elasticsearch.tasks.Task task)

Specified by:

logSSLException in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logSSLException in class AbstractAuditLog

logSSLException

public void logSSLException(org.elasticsearch.rest.RestRequest request,
                            Throwable t)

Specified by:

logSSLException in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logSSLException in class AbstractAuditLog

logDocumentRead

public void logDocumentRead(String index,
                            String id,
                            org.elasticsearch.index.shard.ShardId shardId,
                            Map<String,String> fieldNameValues,
                            com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)

Specified by:

logDocumentRead in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logDocumentRead in class AbstractAuditLog

logDocumentWritten

public void logDocumentWritten(org.elasticsearch.index.shard.ShardId shardId,
                               org.elasticsearch.index.get.GetResult originalResult,
                               org.elasticsearch.index.engine.Engine.Index currentIndex,
                               org.elasticsearch.index.engine.Engine.IndexResult result,
                               com.floragunn.searchguard.compliance.ComplianceConfig complianceConfig)

Specified by:

logDocumentWritten in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logDocumentWritten in class AbstractAuditLog

logDocumentDeleted

public void logDocumentDeleted(org.elasticsearch.index.shard.ShardId shardId,
                               org.elasticsearch.index.engine.Engine.Delete delete,
                               org.elasticsearch.index.engine.Engine.DeleteResult result)

Specified by:

logDocumentDeleted in interface com.floragunn.searchguard.auditlog.AuditLog

Overrides:

logDocumentDeleted in class AbstractAuditLog