Struct Event 

pub struct Event {
    pub timestamp: i64,
    /* private fields */
}

A simplified event representation.

Fields

timestamp: i64

Unix timestamp in seconds from the d: field, or 0 if not present.

NOTE: Do not compare this field directly without first normalizing pipeline-generated fill-in values — see EventsAnalyzer for details.

Implementations

impl Event

pub fn title(&self) -> &str

Returns the title of the event.

pub fn text(&self) -> &str

Returns the text of the event.

pub fn alert_type(&self) -> &str

Returns the alert type of the event.

pub fn aggregation_key(&self) -> &str

Returns the aggregation key of the event.

pub fn hostname(&self) -> &str

Returns the hostname of the event.

pub fn priority(&self) -> &str

Returns the priority of the event.

pub fn source_type_name(&self) -> &str

Returns the source type name of the event.

pub fn tags(&self) -> &[String]

Returns the tags of the event.

pub fn timestamp(&self) -> i64

Returns the timestamp of the event (Unix seconds, 0 if not set).

pub fn from_events_payload(payload: EventsPayload) -> Vec<Self>

Converts an EventsPayload into a list of Events.

pub fn from_intake_event( title: String, text: String, alert_type: String, aggregation_key: String, hostname: String, priority: String, source_type_name: String, tags: Vec<String>, timestamp: i64, ) -> Self

Builds an Event from the fields extracted from the stock agent’s /intake/ JSON format.

Trait Implementations

impl Clone for Event

fn clone(&self) -> Event

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Event

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Event

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Ord for Event

fn cmp(&self, other: &Event) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Event

fn eq(&self, other: &Event) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for Event

fn partial_cmp(&self, other: &Event) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Event

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Event

impl StructuralPartialEq for Event