Source code for plaso.formatters.popcontest
# -*- coding: utf-8 -*-
"""The Popularity Contest event formatters."""
from __future__ import unicode_literals
from plaso.formatters import interface
from plaso.formatters import manager
[docs]class PopularityContestSessionFormatter(interface.ConditionalEventFormatter):
"""Formatter for a Popularity Contest Session information event."""
DATA_TYPE = 'popularity_contest:session:event'
FORMAT_STRING_PIECES = [
'Session {session}',
'{status}',
'ID {hostid}',
'[{details}]']
FORMAT_STRING_SHORT_PIECES = [
'Session {session}',
'{status}']
SOURCE_LONG = 'Popularity Contest Session'
SOURCE_SHORT = 'LOG'
[docs]class PopularityContestLogFormatter(interface.ConditionalEventFormatter):
"""Formatter for a Popularity Contest Log event."""
DATA_TYPE = 'popularity_contest:log:event'
FORMAT_STRING_PIECES = [
'mru [{mru}]',
'package [{package}]',
'tag [{record_tag}]']
FORMAT_STRING_SHORT_PIECES = ['{mru}']
SOURCE_LONG = 'Popularity Contest Log'
SOURCE_SHORT = 'LOG'
manager.FormattersManager.RegisterFormatters([
PopularityContestSessionFormatter, PopularityContestLogFormatter])