Struct FileSink 

pub struct FileSink { /* private fields */ }

An append-only audit file, one JSON event per line.

This is the sink that makes an audit log an audit log: WriterSink over a File writes through the same handle but never calls sync_data, so a power loss takes the tail of the log with it — and the tail is where the interesting events are, because an attacker’s last act is what crashed the box.

sync_each trades throughput for that guarantee. Leave it on unless the log is also shipped somewhere else synchronously.

Implementations

impl FileSink

pub fn open(path: impl AsRef<Path>, sync_each: bool) -> Result<Self>

Open (or create) an audit log at path in append mode.

Errors

Returns an error if the file or its parent directory cannot be created or opened.

Trait Implementations

impl AuditSink for FileSink

fn emit(&self, event: &AuditEvent) -> Result<()>

Write an audit event.

fn flush(&self) -> Result<()>

Flush any buffered output.

fn is_durable(&self) -> bool

Whether this sink is considered durable.