Source code for plaso.formatters.popcontest

# -*- coding: utf-8 -*-
"""The Popularity Contest event formatters."""

from __future__ import unicode_literals

from plaso.formatters import interface
from plaso.formatters import manager


[docs]class PopularityContestSessionFormatter(interface.ConditionalEventFormatter): """Formatter for a Popularity Contest Session information event.""" DATA_TYPE = 'popularity_contest:session:event' FORMAT_STRING_PIECES = [ 'Session {session}', '{status}', 'ID {hostid}', '[{details}]'] FORMAT_STRING_SHORT_PIECES = [ 'Session {session}', '{status}'] SOURCE_LONG = 'Popularity Contest Session'
SOURCE_SHORT = 'LOG'
[docs]class PopularityContestLogFormatter(interface.ConditionalEventFormatter): """Formatter for a Popularity Contest Log event.""" DATA_TYPE = 'popularity_contest:log:event' FORMAT_STRING_PIECES = [ 'mru [{mru}]', 'package [{package}]', 'tag [{record_tag}]'] FORMAT_STRING_SHORT_PIECES = ['{mru}'] SOURCE_LONG = 'Popularity Contest Log'
SOURCE_SHORT = 'LOG' manager.FormattersManager.RegisterFormatters([ PopularityContestSessionFormatter, PopularityContestLogFormatter])