PySpark Plaso
Release 2019
A tool for distributed extraction of timestamps from various files using extractors adapted from the Plaso engine to Apache Spark.
|
Public Member Functions | |
def | close (self) |
def | read (self, size) |
def | seek (self, offset, whence) |
Abstract class for a generic file.
def plaso.tarzan.file.generic_file.FileObject.close | ( | self | ) |
Close the file.
Reimplemented in plaso.tarzan.file.hdfs_file.HdfsFileObject, and plaso.tarzan.file.file.LocalFileObject.
def plaso.tarzan.file.generic_file.FileObject.read | ( | self, | |
size | |||
) |
Reads a byte string from the file-like object at the current offset. The function will read a byte string of the specified size or all of the remaining data if no size was specified. :param size: number of bytes to read, where None is all remaining data :return: data read
Reimplemented in plaso.tarzan.file.hdfs_file.HdfsFileObject, and plaso.tarzan.file.file.LocalFileObject.
def plaso.tarzan.file.generic_file.FileObject.seek | ( | self, | |
offset, | |||
whence | |||
) |
Set a position in the file for future reading or writing. :param offset: the position as an offset :param whence: from where the position should be reached (the beginning, the end, etc.)
Reimplemented in plaso.tarzan.file.file.LocalFileObject, and plaso.tarzan.file.hdfs_file.HdfsFileObject.