brexhq / substation

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
https://substation.readme.io
MIT License
322 stars 16 forks source link

feat(transform): Add UtilityControl Transform for Generating Ctrl Messages #175

Closed jshlbrd closed 4 months ago

jshlbrd commented 4 months ago

Description

Motivation and Context

This provides an option to manage how data flows through the system, which is otherwise impossible without creating or modifying the application code. Triggering ctrl messages is based on the amount of data passed through the system, which relies on the commonly used batching / aggregation methods.

This also fixes a bug where some aggregate transforms can create empty results.

How Has This Been Tested?

Added an example for the new transform.

Types of changes

Checklist: