brexhq / substation

Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
https://substation.readme.io
MIT License
330 stars 21 forks source link

feat: Customizable Sink Files #93

Closed jshlbrd closed 1 year ago

jshlbrd commented 1 year ago

Description

Motivation and Context

Motivation and context is described in https://github.com/brexhq/substation/discussions/91. Here's the impact of this PR:

The file sink was added to test the usefulness of abstracting settings into a reusable struct versus keeping it only for the AWS S3 sink. In my opinion it works fine, and can be reused for other cloud service providers in the future.

How Has This Been Tested?

Locally integration tested all filePath config options using AWS S3 and local files.

Types of changes

Checklist: