Closed cborla closed 1 week ago
The development of the following PR consists of 4 points.
Adapt the queue to be able to support 2 columns for all tables, the fields to be added are the moduleType and the metadata.
Adapt the logcollector module, so that when assembling the message to insert in the queue, it respects the following format.
{ "agent": { "groups": [], "host": { "architecture": "x86_64", "hostname": "chb-VBox", "ip": "10.0.2.5", "os": { "name": "Ubuntu", "platform": "Linux" } }, "id": "ee9009ba-f2db-4ac4-a74f-77f52c2d421a", "type": "Endpoint", "version": "5.0.0" } } { "module": "logcollector", "type": "file" } { "event": { "ingested": "", "module": "logcollector", "original": "hello wazuh!", "provider": "syslog" }, "log": { "file": { "path": "/tmp/test.log" } }, "tags": [ "mvp" ] }
Changes related to dataType will be addressed in another PR. cc @cborla
dataType
Description
The development of the following PR consists of 4 points.
Adapt the queue to be able to support 2 columns for all tables, the fields to be added are the moduleType and the metadata.
Adapt the logcollector module, so that when assembling the message to insert in the queue, it respects the following format.
Tests