Bootstrap the RuleEngine package #4442
Conversation
Signed-off-by: Chase Engelbrecht <[email protected]>
Signed-off-by: Chase Engelbrecht <[email protected]>
Signed-off-by: Chase Engelbrecht <[email protected]>
Signed-off-by: Chase Engelbrecht <[email protected]>
engechas
requested review from
chenqi0805,
graytaylor0,
dinujoh,
kkondaka,
asifsmohammed,
KarstenSchnitter,
dlvenable and
oeyh
as code owners
| @@ -0,0 +1,6 @@ | |||
| # Rule Engine | |||
|
|
|||
| This project implements an engine to perform real-time security rule matching against a stream of incoming data. | |||
There was a problem hiding this comment.
Can you specify how this engine is going to be used in the pipelines?
There was a problem hiding this comment.
This project will be semi-separate from the rest of DataPrepper, but it will be integrated into DataPrepper through a processor that leverages the rule engine.
The long term vision is to perform security rule analysis against data moving through the pipeline with this rule engine
There was a problem hiding this comment.
What do you mean by semi-separate?
It seems this may be a good candidate for a new project in the opensearchproject. You could make a library publish to Maven Central and then use that in Data Prepper. This would be especially helpful if you want a different group of maintainers to review changes to that core library.
Can you elaborate some on the vision here to see if this is the right project to use?
| @@ -0,0 +1,6 @@ | |||
| # Rule Engine | |||
|
|
|||
| This project implements an engine to perform real-time security rule matching against a stream of incoming data. | |||
There was a problem hiding this comment.
What do you mean by semi-separate?
It seems this may be a good candidate for a new project in the opensearchproject. You could make a library publish to Maven Central and then use that in Data Prepper. This would be especially helpful if you want a different group of maintainers to review changes to that core library.
Can you elaborate some on the vision here to see if this is the right project to use?
| id 'java' | ||
| } | ||
|
|
||
| group 'org.opensearch.ruleengine' |
There was a problem hiding this comment.
Is there a clearer group you can use here? We actually have a different PR ( #4446) with rule evaluation?
group 'org.opensearch.securityanalytics.rulengine
???
| @@ -0,0 +1,10 @@ | |||
| package org.opensearch.ruleengine; | |||
There was a problem hiding this comment.
Similar comment for the package as I had with the groupId.
Description
Adds a new gradle project and the initial files for the Rule Engine.
Check List
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.