{"id":18976994,"url":"https://github.com/ren3gadem4rm0t/cef-parser-go","last_synced_at":"2025-10-03T19:44:02.186Z","repository":{"id":251429917,"uuid":"826873222","full_name":"ren3gadem4rm0t/cef-parser-go","owner":"ren3gadem4rm0t","description":"Simple CEF Parser written in Go","archived":false,"fork":false,"pushed_at":"2025-05-08T17:11:03.000Z","size":94,"stargazers_count":3,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-08T18:24:50.831Z","etag":null,"topics":["cef","go","logging","parser"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ren3gadem4rm0t.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-10T14:49:22.000Z","updated_at":"2025-04-12T00:55:59.000Z","dependencies_parsed_at":"2024-11-08T15:42:53.571Z","dependency_job_id":null,"html_url":"https://github.com/ren3gadem4rm0t/cef-parser-go","commit_stats":null,"previous_names":["ren3gadem4rm0t/cef-parser-go"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/ren3gadem4rm0t/cef-parser-go","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ren3gadem4rm0t%2Fcef-parser-go","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ren3gadem4rm0t%2Fcef-parser-go/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ren3gadem4rm0t%2Fcef-parser-go/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ren3gadem4rm0t%2Fcef-parser-go/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ren3gadem4rm0t","download_url":"https://codeload.github.com/ren3gadem4rm0t/cef-parser-go/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ren3gadem4rm0t%2Fcef-parser-go/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265402609,"owners_count":23759190,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cef","go","logging","parser"],"created_at":"2024-11-08T15:27:12.289Z","updated_at":"2025-10-03T19:43:57.165Z","avatar_url":"https://github.com/ren3gadem4rm0t.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![CI](https://github.com/ren3gadem4rm0t/cef-parser-go/actions/workflows/ci.yml/badge.svg)](https://github.com/ren3gadem4rm0t/cef-parser-go/actions/workflows/ci.yml)\n\n# CEF Parser for Go\n\n## Overview\n\nA Go library for parsing Common Event Format (CEF) logs with examples and utilities.\n\n## Features\n\n- Parse CEF logs from multiple vendors\n- Retrieve and manipulate CEF fields\n- Context-aware CEF parsing with timeout support\n- JSON representation of parsed CEF events\n- Map conversion of CEF extension fields\n- Dynamic field retrieval by name\n- Support for custom vendor-specific extensions\n- Error handling and validation for CEF formats\n- Multiple parser implementations optimized for different use cases\n- Configurable validation levels and memory management\n- Batch and stream processing capabilities\n- Metrics collection for performance monitoring\n- Utility functions for struct manipulation\n- Examples for basic usage, field access, and field enumeration\n- Comprehensive test coverage\n\n## Installation\n\n```bash\ngo get github.com/ren3gadem4rm0t/cef-parser-go\n```\n\n## Usage\n\n### Basic Usage\n\n```go\npackage main\n\nimport (\n    \"fmt\"\n    \"log\"\n    \"github.com/ren3gadem4rm0t/cef-parser-go/parser\"\n)\n\nfunc main() {\n    event := parser.ImpervaCEF1\n    cefEvent, err := parser.ParseCEF(event)\n    if err != nil {\n        log.Fatal(err)\n    }\n    fmt.Println(cefEvent.AsJSON())\n}\n```\n\n### Field Access\n\n```go\npackage main\n\nimport (\n    \"context\"\n    \"fmt\"\n    \"log\"\n    \"time\"\n    \"github.com/ren3gadem4rm0t/cef-parser-go/parser\"\n)\n\nfunc main() {\n    ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)\n    defer cancel()\n\n    event := parser.ImpervaCEF1\n    cefEvent, err := parser.ParseCEFWithContext(ctx, event)\n    if err != nil {\n        log.Fatal(err)\n    }\n\n    cs10, err := cefEvent.Extensions.GetField(\"CS10\")\n    if err != nil {\n        log.Fatal(err)\n    }\n\n    fmt.Printf(\"CS10: %+v\\n\", cs10)\n}\n```\n\n### Configure Parser Behavior\n\n```go\npackage main\n\nimport (\n    \"fmt\"\n    \"log\"\n    \"github.com/ren3gadem4rm0t/cef-parser-go/parser\"\n)\n\nfunc main() {\n    // Create a parser with fast configuration\n    fastParser := parser.NewParser(parser.FastConfig())\n    \n    event := parser.ImpervaCEF1\n    cefEvent, err := fastParser.Parse(event)\n    if err != nil {\n        log.Fatal(err)\n    }\n    \n    // Return object to pool when done\n    defer fastParser.Release(cefEvent)\n    \n    fmt.Printf(\"Parsed %s | %s\\n\", cefEvent.DeviceVendor, cefEvent.Name)\n    \n    // Get parser metrics\n    metrics := fastParser.GetMetrics()\n    fmt.Printf(\"Parsed %d events, %d bytes processed\\n\", \n        metrics[parser.MetricParsed], \n        metrics[parser.MetricBytesProcessed])\n}\n```\n\n### Batch Processing for High Throughput\n\n```go\npackage main\n\nimport (\n    \"fmt\"\n    \"log\"\n    \"github.com/ren3gadem4rm0t/cef-parser-go/parser\"\n)\n\nfunc main() {\n    events := []string{\n        parser.ImpervaCEF1,\n        parser.ImpervaCEF5,\n        parser.CentrifyCEF,\n    }\n    \n    // Create a fast parser for high performance\n    fastParser := parser.NewParser(parser.FastConfig())\n    \n    // Process multiple events in parallel\n    results, errors := fastParser.BatchParse(events)\n    \n    for i, result := range results {\n        if errors[i] != nil {\n            fmt.Printf(\"Error parsing event %d: %v\\n\", i, errors[i])\n        } else {\n            fmt.Printf(\"Event %d: %s %s\\n\", i, result.DeviceVendor, result.Name)\n            \n            // Return object to pool\n            fastParser.Release(result)\n        }\n    }\n}\n```\n\n### Stream Processing\n\n```go\npackage main\n\nimport (\n    \"bufio\"\n    \"fmt\"\n    \"log\"\n    \"os\"\n    \"github.com/ren3gadem4rm0t/cef-parser-go/parser\"\n)\n\nfunc main() {\n    // Open a file with CEF events\n    file, err := os.Open(\"events.log\")\n    if err != nil {\n        log.Fatal(err)\n    }\n    defer file.Close()\n    \n    // Create a parser with safe configuration for robust validation\n    safeParser := parser.NewParser(parser.SafeConfig())\n    \n    // Process events from a stream\n    err = safeParser.ParseStream(file, func(cef *parser.CEF, err error) bool {\n        if err != nil {\n            fmt.Printf(\"Error: %v\\n\", err)\n            return true // continue processing\n        }\n        \n        fmt.Printf(\"Parsed: %s | %s\\n\", cef.DeviceVendor, cef.Name)\n        safeParser.Release(cef)\n        return true // continue processing\n    })\n    \n    if err != nil {\n        log.Fatal(err)\n    }\n}\n```\n\n## Contributing\n\nWe welcome contributions! Please see [CONTRIBUTING.md](./CONTRIBUTING.md) for more details.\n\n## License\n\nThis project is licensed under the MIT License - see the [LICENSE](./LICENSE) file for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fren3gadem4rm0t%2Fcef-parser-go","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fren3gadem4rm0t%2Fcef-parser-go","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fren3gadem4rm0t%2Fcef-parser-go/lists"}