Struct MemorySink 

pub struct MemorySink { /* private fields */ }

In-memory audit sink, useful for testing and querying.

Implementations

impl MemorySink

pub fn new(max_capacity: usize) -> Self

Create a new memory sink with the given capacity.

pub fn dropped_count(&self) -> u64

Number of events that were dropped due to overflow.

pub fn events(&self) -> Vec<AuditEvent>

All stored events.

pub fn len(&self) -> usize

Number of stored events.

pub fn is_empty(&self) -> bool

Whether the sink is empty.

pub fn query_by_principal(&self, principal: &str) -> Vec<AuditEvent>

Query events by principal.

pub fn query_by_decision(&self, decision: AuditDecision) -> Vec<AuditEvent>

Query events by decision.

pub fn query_by_resource(&self, resource: &str) -> Vec<AuditEvent>

Query events by resource.

pub fn query_by_time_range(&self, min_ts: i64, max_ts: i64) -> Vec<AuditEvent>

Query events within a time range.

pub fn drain(&self) -> Vec<AuditEvent>

Drain all events.

pub fn fill_ratio(&self) -> f64

Fraction of capacity currently used (0.0 – 1.0).

Trait Implementations

impl AuditSink for MemorySink

fn emit(&self, event: &AuditEvent) -> Result<()>

Write an audit event.

fn flush(&self) -> Result<()>

Flush any buffered output.

fn is_durable(&self) -> bool

Whether this sink is considered durable.

impl Default for MemorySink

fn default() -> Self

Returns the “default value” for a type.