Function filterRedundantSSHSessionItems

agent/app/service/ssh.go:1318–1327

(items []sshParsedLog, sessionHasAuthEvent map[string]bool)

}

func filterRedundantSSHSessionItems(items []sshParsedLog, sessionHasAuthEvent map[string]bool) []sshParsedLog {
	filteredItems := make([]sshParsedLog, 0, len(items))
	for _, item := range items {
		if !isSSHAuthEvent(item) && item.SessionKey != "" && sessionHasAuthEvent[item.SessionKey] {
			continue
		}
		filteredItems = append(filteredItems, item)
	}
	return filteredItems
}

func isSSHAuthEvent(item sshParsedLog) bool {
	return item.History.Status == constant.StatusSuccess || item.History.AuthMode != ""