insights-core
insights-core copied to clipboard
Add deny filtering capabilitiy
- Adds new deny filter to allow removal of lines that match the deny criteria
- Add testing for new deny filters
Signed-off-by: Bob Fahr [email protected]
@csams @gravitypriest here a first stab at adding deny filters to core. It should be transparent to end users with no changes to add_filter
. A new add_deny_filter
will create the new type of filters. Deny filters are incorporated into the blacklist
, making them mutually exclusive of allow filters and they take precedence over allow filters. This may not be the best approach if the goal is to remove sensitive info, but also reduce the amount of data collected.
Doc will be part of this PR, but I don't want to create them until we work out the details of serialization and precedence/mutual exclusivity.
Can one of the admins verify this patch?