org.elasticsearch.xpack.security.audit.AuditLevel Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of x-pack-security Show documentation

Elasticsearch Expanded Pack Plugin - Security

There is a newer version: 8.16.1

/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0; you may not use this file except in compliance with the Elastic License
 * 2.0.
 */
package org.elasticsearch.xpack.security.audit;

import java.util.Arrays;
import java.util.EnumSet;
import java.util.List;
import java.util.Locale;

public enum AuditLevel {

    ANONYMOUS_ACCESS_DENIED,
    AUTHENTICATION_FAILED,
    REALM_AUTHENTICATION_FAILED,
    ACCESS_GRANTED,
    ACCESS_DENIED,
    TAMPERED_REQUEST,
    CONNECTION_GRANTED,
    CONNECTION_DENIED,
    SYSTEM_ACCESS_GRANTED,
    SECURITY_CONFIG_CHANGE,
    AUTHENTICATION_SUCCESS,
    RUN_AS_GRANTED,
    RUN_AS_DENIED;

    static EnumSet parse(List levels) {
        EnumSet enumSet = EnumSet.noneOf(AuditLevel.class);
        for (String level : levels) {
            String lowerCaseLevel = level.trim().toLowerCase(Locale.ROOT);
            switch (lowerCaseLevel) {
                case "_all" -> enumSet.addAll(Arrays.asList(AuditLevel.values()));
                case "anonymous_access_denied" -> enumSet.add(ANONYMOUS_ACCESS_DENIED);
                case "authentication_failed" -> enumSet.add(AUTHENTICATION_FAILED);
                case "realm_authentication_failed" -> enumSet.add(REALM_AUTHENTICATION_FAILED);
                case "access_granted" -> enumSet.add(ACCESS_GRANTED);
                case "access_denied" -> enumSet.add(ACCESS_DENIED);
                case "tampered_request" -> enumSet.add(TAMPERED_REQUEST);
                case "connection_granted" -> enumSet.add(CONNECTION_GRANTED);
                case "connection_denied" -> enumSet.add(CONNECTION_DENIED);
                case "system_access_granted" -> enumSet.add(SYSTEM_ACCESS_GRANTED);
                case "security_config_change" -> enumSet.add(SECURITY_CONFIG_CHANGE);
                case "authentication_success" -> enumSet.add(AUTHENTICATION_SUCCESS);
                case "run_as_granted" -> enumSet.add(RUN_AS_GRANTED);
                case "run_as_denied" -> enumSet.add(RUN_AS_DENIED);
                default -> throw new IllegalArgumentException("invalid event name specified [" + level + "]");
            }
        }
        return enumSet;
    }

    public static EnumSet parse(List includeLevels, List excludeLevels) {
        EnumSet included = parse(includeLevels);
        EnumSet excluded = parse(excludeLevels);
        included.removeAll(excluded);
        return included;
    }
}