PySpark Plaso
Release 2019
A tool for distributed extraction of timestamps from various files using extractors adapted from the Plaso engine to Apache Spark.
|
Public Member Functions | |
def | __init__ (self) |
def | ProduceEventWithEventData (self, event, event_data) |
def | ProduceExtractionError (self, message, path_spec=None) |
def | ProduceExtractionWarning (self, message, path_spec=None) |
![]() | |
def | SetFileEntry (self, file_entry) |
def | GetFileEntry (self) |
def | GetFilename (self) |
def | AppendToParserChain (self, plugin_or_parser) |
def | PopFromParserChain (self) |
def | AddEventAttribute (self, attribute_name, attribute_value) |
def | RemoveEventAttribute (self, attribute_name) |
def | abort (self) |
def | temporary_directory (self) |
Additional Inherited Members | |
![]() | |
file_entry | |
parser_chain_components | |
collection_filters_helper | |
codepage | |
Tarzan mediator printing events to stdout.
def plaso.tarzan.mediator.print_mediator.PrintMediator.__init__ | ( | self | ) |
Initialize the mediator.
Reimplemented from plaso.tarzan.mediator.mediator.Mediator.
def plaso.tarzan.mediator.print_mediator.PrintMediator.ProduceEventWithEventData | ( | self, | |
event, | |||
event_data | |||
) |
Produce a particular event with its data. :param event: the event :param event_data: the event's data
Reimplemented from plaso.tarzan.mediator.mediator.Mediator.
def plaso.tarzan.mediator.print_mediator.PrintMediator.ProduceExtractionError | ( | self, | |
message, | |||
path_spec = None |
|||
) |
Produce an extraction error with a particular message and a path. :param message: the error message :param path_spec: the erroneous path
Reimplemented from plaso.tarzan.mediator.mediator.Mediator.
def plaso.tarzan.mediator.print_mediator.PrintMediator.ProduceExtractionWarning | ( | self, | |
message, | |||
path_spec = None |
|||
) |
Produce an extraction warning with a particular message and a path. :param message: the warning message :param path_spec: the path that caused the warning