# Functions
NewCollector creates a new collector instance.
NewEventPublisher creates a new EventPublisher.
NewRouter creates a new router.
# Constants
DefaultMaxConcurrentBatches is how many parallel batches before we start blocking.
DefaultMaxEventsPerBatch is the default max number of events in a batch.
DefaultPendingWorkCapacity is pending items to hold in the work channel before blocking or overflowing.
DefaultSendInterval is the duration after which to send a pending batch.
PendingWorkToMaxEventsRatio is a safeguard to hold enough pending work to minimize overflowing.
RouteTypeSample is a route that is sample.
RouteTypeTarget is a route that is targeted.
# Variables
MatchedRoutePathParam is the Param name under which the path of the matched route is stored, if Router.SaveMatchedRoutePath is set.
# Structs
Collector determines whether to collect a request as an audit or sample event.
EventAgent is the agent sending the event https://github.com/elastic/ecs/blob/1.9/code/go/ecs/agent.go.
EventClient is the client originating the event https://github.com/elastic/ecs/blob/1.9/code/go/ecs/client.go.
EventOrganization is the organization of the client https://github.com/elastic/ecs/blob/1.9/code/go/ecs/organization.go.
EventPublisher publishes audit events to auditr.
Event is a raw audit event A raw audit event is a set of minimal fields required for an audit event.
EventRoute is the route where the event occurred todo: drop "Event"?.
EventUser is the user who triggered the event https://github.com/elastic/ecs/blob/1.9/code/go/ecs/user.go.
Param is a single URL parameter, consisting of a key and a value.
PublisherOptions are options to override default settings.
Response is the result of processing an event.
Router matches the incoming request to a route that is targeted or sample.
# Interfaces
EventBuilder builds an event from the given parameters.
Publisher publishes events to a receiving endpoint.
# Type aliases
Handle is a function that can be registered to a route to handle HTTP requests.
Params is a Param-slice, as returned by the router.
PublisherOption is an option to override defaults.
RouteType describes the type of route; either target or sample.