Package io.jenkins.plugins.auditlogger

Class AnomalyDetector

java.lang.Object

io.jenkins.plugins.auditlogger.AnomalyDetector

public class AnomalyDetector
extends Object

Lightweight anomaly detection for dashboard alerts. Failed-login detection is intentionally simple, bounded, and configurable so it can run safely on the audit ingest path without accumulating unbounded state.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	AnomalyDetector.AnomalyAlert
static enum	AnomalyDetector.AnomalyType

Constructor Summary

Constructors

Constructor	Description
AnomalyDetector()

Method Summary

Modifier and Type	Method	Description
void	addAlert(AnomalyDetector.AnomalyAlert alert)
void	addAlert(AnomalyDetector.AnomalyAlert alert, AuditLoggerConfiguration config)
void	analyze(AuditLogEntry entry)
void	analyze(AuditLogEntry entry, AuditLoggerConfiguration config)
void	cleanupOldAlerts()
boolean	dismissAlert(String alertId)
void	dismissAlertsForDisabledRules(AuditLoggerConfiguration config)
int	dismissAllAlerts()
List<AnomalyDetector.AnomalyAlert>	getAlerts(int limit)
List<AnomalyDetector.AnomalyAlert>	getAlerts(int limit, AuditLoggerConfiguration config)
Map<String,Object>	getStatistics()
boolean	isRuleEnabled(AnomalyDetector.AnomalyType type, AuditLoggerConfiguration config)
protected void	sendEmail(jakarta.mail.internet.MimeMessage msg)	Protected for testing
protected void	sendWebhook(String url, String json)	Protected for testing

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

AnomalyDetector

public AnomalyDetector()

Method Details

analyze

public void analyze(AuditLogEntry entry)

analyze

public void analyze(AuditLogEntry entry,
 AuditLoggerConfiguration config)

addAlert

public void addAlert(AnomalyDetector.AnomalyAlert alert)

addAlert

public void addAlert(AnomalyDetector.AnomalyAlert alert,
 AuditLoggerConfiguration config)

getAlerts

public List<AnomalyDetector.AnomalyAlert> getAlerts(int limit)

getAlerts

public List<AnomalyDetector.AnomalyAlert> getAlerts(int limit,
 AuditLoggerConfiguration config)

isRuleEnabled

public boolean isRuleEnabled(AnomalyDetector.AnomalyType type,
 AuditLoggerConfiguration config)

dismissAlert

public boolean dismissAlert(String alertId)

dismissAllAlerts

public int dismissAllAlerts()

dismissAlertsForDisabledRules

public void dismissAlertsForDisabledRules(AuditLoggerConfiguration config)

cleanupOldAlerts

public void cleanupOldAlerts()

getStatistics

public Map<String,Object> getStatistics()

sendEmail

protected void sendEmail(jakarta.mail.internet.MimeMessage msg)
                  throws Exception

Protected for testing

Throws:

Exception

sendWebhook

protected void sendWebhook(String url,
 String json)
                    throws Exception

Protected for testing

Throws:

Exception