Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auditbeat recursive file watches for Windows #6893

Merged
merged 5 commits into from
Apr 19, 2018
Merged

Auditbeat recursive file watches for Windows #6893

merged 5 commits into from
Apr 19, 2018

Commits on Apr 19, 2018

  1. Use custom version of fsnotify with recursion support

    @adriansr
    adriansr committed Apr 19, 2018
    Configuration menu
    Copy the full SHA
    b74e330 View commit details
    Browse the repository at this point in the history

  2. Add support for case-insensitive text search in system-tests 

    Allow system tests to search for text in the beat logfile using
case-insensitive search. This is necessary to match paths in
case-insensitive file systems, where the path logged may have different
capitalisation than the one used in the system test.
    @adriansr
    adriansr committed Apr 19, 2018
    Configuration menu
    Copy the full SHA
    4b24204 View commit details
    Browse the repository at this point in the history

  3. Added system-test for the file_integrity module

    @adriansr
    adriansr committed Apr 19, 2018
    Configuration menu
    Copy the full SHA
    6354848 View commit details
    Browse the repository at this point in the history

  4. Auditbeat: Fix deadlock in fsnotify under Windows 

    Under Windows, directories to be watched need to be installed after the
event consumer loop is started. Otherwise there's a chance of a
potential deadlock, as fsnotify under Windows uses a single goroutine to
deliver events and install watches. If the channel it uses to deliver
events is full, it will block and won't be able to install further
watches.
    @adriansr
    adriansr committed Apr 19, 2018
    Configuration menu
    Copy the full SHA
    da5c383 View commit details
    Browse the repository at this point in the history

  5. Auditbeat: Use OS-support for recursive watches 

    This patch enables OS-supported recursive watching in fsnotify if it is
available. Currently only supported under Windows via our custom
fsnotify fork.
    @adriansr
    adriansr committed Apr 19, 2018
    Configuration menu
    Copy the full SHA
    9f86b3a View commit details
    Browse the repository at this point in the history