pub fn validate_event(
line: &str,
line_num: usize,
) -> Result<(), ValidationError>Expand description
Validate a single TSJSON event line.
Performs all three levels of validation:
- Syntax: correct tab-separated field count, valid timestamp, valid event hash format and value.
- Schema: valid JSON payload matching the event type.
- Semantic: valid item ID, non-empty agent/itc, valid parent hashes, payload size under limit.
Comment lines (starting with #) and blank lines return Ok(()).
ยงErrors
Returns a ValidationError describing the first failure found.