Struct EventMessage 

pub struct EventMessage {
    pub event_type: String,
    pub timestamp: f64,
    pub hostname: Option<String>,
    pub utcoffset: Option<i32>,
    pub pid: Option<u32>,
    pub clock: Option<u64>,
    pub fields: HashMap<String, Value>,
}

Base event message structure

Fields

event_type: String

Event type

timestamp: f64

Timestamp when event occurred

hostname: Option<String>

Hostname of the sender

utcoffset: Option<i32>

UTC offset

pid: Option<u32>

Process ID

clock: Option<u64>

Clock value (for ordering)

fields: HashMap<String, Value>

Additional event-specific fields

Implementations

impl EventMessage

pub fn new(event_type: EventType) -> Self

Create a new event message

pub fn with_timestamp(self, timestamp: DateTime<Utc>) -> Self

Create an event with a specific timestamp

pub fn with_hostname(self, hostname: impl Into<String>) -> Self

Set the hostname

pub fn with_pid(self, pid: u32) -> Self

Set the process ID

pub fn with_clock(self, clock: u64) -> Self

Set the clock value

pub fn with_field(self, key: impl Into<String>, value: Value) -> Self

Add a custom field

pub fn get_type(&self) -> &str

Get the event type

pub fn get_datetime(&self) -> DateTime<Utc>

Get the timestamp as DateTime

pub fn to_json(&self) -> Result<Vec<u8>, Error>

Serialize to JSON bytes

pub fn from_json(bytes: &[u8]) -> Result<Self, Error>

Deserialize from JSON bytes

Trait Implementations

impl Clone for EventMessage

fn clone(&self) -> EventMessage

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EventMessage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EventMessage

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<EventType> for EventMessage

fn from(event_type: EventType) -> Self

Converts to this type from the input type.

impl PartialEq for EventMessage

fn eq(&self, other: &EventMessage) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for EventMessage

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for EventMessage