Struct AlertEvaluator 

pub struct AlertEvaluator { /* private fields */ }

Consumes events and snapshots, applying AlertRules and emitting RuleAlerts with hysteresis and cooldown.

The evaluator is !Sync-free (it is plain Send state) and intended to be driven from a single monitoring task. Call observe_event for each incoming Event and observe_snapshot for each periodic EventSnapshot; both return any alerts produced.

Implementations

impl AlertEvaluator

pub fn new() -> Self

Create an evaluator with no rules.

pub fn with_rule(self, rule: AlertRule) -> Self

Add a rule (builder style).

pub fn add_rule(&mut self, rule: AlertRule)

Add a rule in place.

pub fn rule_count(&self) -> usize

Number of configured rules.

pub fn is_firing(&self, name: &str) -> bool

Whether the rule with name is currently firing.

pub fn observe_event(&mut self, event: &Event) -> Vec<RuleAlert>

Observe a single event, updating internal windows and evaluating rules.

Returns any alerts (firing or resolved) produced as a result.

pub fn observe_snapshot(&mut self, snapshot: &EventSnapshot) -> Vec<RuleAlert>

Observe a periodic snapshot, evaluating snapshot-driven rules.

Returns any alerts produced. Queue-depth and no-heartbeat rules are primarily evaluated here; failure-rate rules also incorporate the snapshot’s completed counts as additional samples.

pub fn tick(&mut self, now: DateTime<Utc>) -> Vec<RuleAlert>

Explicitly evaluate time-based rules (e.g. no-heartbeat) at now.

Useful to call on a timer even when no events arrive, so a stalled cluster still trips the no-heartbeat rule.

Trait Implementations

impl Debug for AlertEvaluator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AlertEvaluator

fn default() -> Self

Returns the “default value” for a type.