in cmd/auparse/auparse.go [187:207]
func (s *streamHandler) outputSingleMessage(m *auparse.AuditMessage) error {
switch *format {
case "json":
if err := s.printJSON(m.ToMapStr()); err != nil {
log.Printf("failed to marshal message to JSON: %v", err)
}
case "yaml":
if err := s.printYAML(m.ToMapStr()); err != nil {
log.Printf("failed to marshal message to YAML: %v", err)
}
default:
if _, err := fmt.Fprintf(
s.output,
"type=%v msg=%v\n",
m.RecordType, m.RawData,
); err != nil {
return err
}
}
return nil
}