Support TXT uploads and extend XigmaNAS event parsing

internal/parser/archive.go

@@ -12,6 +12,8 @@ import (
 	"strings"
 )
 
+const maxSingleFileSize = 10 * 1024 * 1024
+
 // ExtractedFile represents a file extracted from archive
 type ExtractedFile struct {
 	Path    string
@@ -29,6 +31,8 @@ func ExtractArchive(archivePath string) ([]ExtractedFile, error) {
 		return extractTar(archivePath)
 	case ".zip":
 		return extractZip(archivePath)
+	case ".txt", ".log":
+		return extractSingleFile(archivePath)
 	default:
 		return nil, fmt.Errorf("unsupported archive format: %s", ext)
 	}
@@ -43,6 +47,8 @@ func ExtractArchiveFromReader(r io.Reader, filename string) ([]ExtractedFile, er
 		return extractTarGzFromReader(r, filename)
 	case ".tar":
 		return extractTarFromReader(r)
+	case ".txt", ".log":
+		return extractSingleFileFromReader(r, filename)
 	default:
 		return nil, fmt.Errorf("unsupported archive format: %s", ext)
 	}
@@ -213,6 +219,33 @@ func extractZip(archivePath string) ([]ExtractedFile, error) {
 	return files, nil
 }
 
+func extractSingleFile(path string) ([]ExtractedFile, error) {
+	f, err := os.Open(path)
+	if err != nil {
+		return nil, fmt.Errorf("open file: %w", err)
+	}
+	defer f.Close()
+
+	return extractSingleFileFromReader(f, filepath.Base(path))
+}
+
+func extractSingleFileFromReader(r io.Reader, filename string) ([]ExtractedFile, error) {
+	content, err := io.ReadAll(io.LimitReader(r, maxSingleFileSize+1))
+	if err != nil {
+		return nil, fmt.Errorf("read file content: %w", err)
+	}
+	if len(content) > maxSingleFileSize {
+		return nil, fmt.Errorf("file too large: max %d bytes", maxSingleFileSize)
+	}
+
+	return []ExtractedFile{
+		{
+			Path:    filepath.Base(filename),
+			Content: content,
+		},
+	}, nil
+}
+
 // FindFileByPattern finds files matching pattern in extracted files
 func FindFileByPattern(files []ExtractedFile, patterns ...string) []ExtractedFile {
 	var result []ExtractedFile