LEEF

SyslogPro~ LEEF

A class to work with IBM LEEF (Log Event Extended Format) messages this form of system messages are designed to work with security systems. Messages can be saved to file (Saving to file if not part of this module but a LEEF formated mesage produced by this module can be saved externaly to it) or sent via Syslog.

Constructor

new LEEF(optionsopt)

Source:
Version:
  • 0.0.0
Since:
  • 0.0.0
Construct a new LEEF object with user options
Parameters:
Name Type Attributes Description
options object <optional>
Options object
Properties
Name Type Attributes Default Description
vendor string <optional>
'unknown' The vendor of the system that genrated the event being reported
product string <optional>
'unknown' The product name of the system that genrated the event being reported
version string <optional>
'unknown' The version name of the system that genrated the event being reported
eventId string <optional>
'unknown' The eventId of the system that genrated the event being reported
attrabute object <optional>
LEEF message attrabutes which defualts to all base attrabutes with null values, new attrabutes should be added as new elements to this object
syslogHeader boolean <optional>
'true' Should the LEEF message include a Syslog header with Timestamp and source
server Syslog <optional>
false A Syslog server connection that should be used to send messages directly from this class. @see SyslogPro~Syslog
Requires:
  • module:moment

Requires

  • module:moment

Members

attrabutes :object

Source:
Type:
  • object

(private) constructor__

Source:

eventId :string

Source:
Type:
  • string

product :string

Source:
Type:
  • string

(private) server

Source:

syslogHeader :boolean

Source:
Type:
  • boolean

vendor :string

Source:
Type:
  • string

version :string

Source:
Type:
  • string

Methods

buildMessage() → {Promise}

Source:
Build a formated message
Returns:
- string with formated message
Type
Promise

send(optionsopt)

Source:
Parameters:
Name Type Attributes Default Description
options Syslog <optional>
false A Syslog server connection that should be used to send messages directly from this class. @see SyslogPro~Syslog