Method GetStatistics

pkg/security/audit.go:683–739

GetStatistics 获取统计信息

(ctx context.Context, filters *AuditFilters)

// GetStatistics 获取统计信息
func (al *InMemoryAuditLog) GetStatistics(ctx context.Context, filters *AuditFilters) (*AuditStatistics, error) {
	al.mu.RLock()
	defer al.mu.RUnlock()

	stats := &AuditStatistics{
		TimeRange:    TimeRange{Start: time.Now(), End: time.Now()},
		EventsByType: make(map[AuditType]int64),
		EventsByUser: make(map[string]int64),
		EventsByHour: make(map[int]int64),
		EventsByDay:  make(map[string]int64),
		GeneratedAt:  time.Now(),
	}

	var timeRange *TimeRange
	if filters != nil && filters.TimeRange != nil {
		timeRange = filters.TimeRange
		stats.TimeRange = *timeRange
	}

	totalEvents := int64(0)
	for i := range al.events {
		event := &al.events[i]

		// 应用时间过滤
		if timeRange != nil {
			if event.Timestamp.Before(timeRange.Start) || event.Timestamp.After(timeRange.End) {
				continue
			}
		}

		// 应用其他过滤条件
		if filters != nil {
			if len(filters.Types) > 0 && !containsAuditType(filters.Types, event.Type) {
				continue
			}
			if len(filters.Users) > 0 && !containsString(filters.Users, event.UserID) {
				continue
			}
		}

		totalEvents++
		stats.EventsByType[event.Type]++
		stats.EventsByUser[event.UserID]++

		// 小时统计
		hour := event.Timestamp.Hour()
		stats.EventsByHour[hour]++

		// 日期统计
		day := event.Timestamp.Format("2006-01-02")
		stats.EventsByDay[day]++
	}

	stats.TotalEvents = totalEvents

	return stats, nil
}