PowerShell / PowerShell/PowerShell-RFC

RFC for pluggable script block/AMSI logging model

未关闭
#169 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

主要语言
PowerShell
星标
468
派生
143
平均合并
9 分钟
30 天内合并 PR
1

描述

from #161/ #106

@PowerShell/powershell-committee discussed this one in detail today. We believe that there's massive value in figuring out how to tee ScriptBlock and AMSI style logs off to remote logging providers, but a bunch of the semantics in this RFC are specific to Splunk.

Instead, we think an RFC should be authored that builds a provider/plugin model for allowing multiple remote logging providers. This RFC should also give consideration to whether local logging targets should be treated the same way (e.g. if you want to exclusively log to a remote target, maybe in serverless/stateless scenarios). There should also be a consideration of whether we should have something like a Get-PSLog or Write-PSLog that are agnostic to logging providers.

The PowerShell Team has a strong interest in picking this up, but we have no idea when we can get to it right now. We only know that it should be a flexible, pluggable model.

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

首先阅读这份 RFC 以及 issues #161 和 #106,然后查看 issue 中引用的 PowerShell Committee 讨论。拟议的工作是一份关于灵活的 provider/plugin 模型的 RFC,用于 ScriptBlock 和 AMSI 风格的日志记录,涵盖多个远程 provider、本地目标,以及 Get-PSLog 或 Write-PSLog 等与 provider 无关的命令。

由索引模型根据 Issue 内容生成。

评估

技术栈
powershell
领域
observability
Issue 类型
功能
难度
5/5
预计耗时
一周以上
活跃度
停滞
描述清晰度
基本清楚
新手友好度
25/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。