Struct EqlEncryptedIndexes 

pub struct EqlEncryptedIndexes {
    pub ore_block_u64_8_256: Option<Vec<String>>,
    pub bloom_filter: Option<Vec<u16>>,
    pub hmac_256: Option<String>,
    pub selector: Option<String>,
    pub blake3: Option<String>,
    pub ore_cllw_u64_8: Option<String>,
    pub ore_cllw_var_8: Option<String>,
    pub ste_vec_index: Option<Vec<EqlEncryptedBody>>,
}

Collection of all possible cryptographic indexes for encrypted data.

This structure contains various encrypted index types that enable different query operations on encrypted data. Each index type supports specific query patterns:

• ORE indexes enable range queries (greater than, less than, etc.)
• Bloom filters enable approximate membership testing
• HMAC/Blake3 enable exact match queries
• SteVec enables vector/array containment queries

Serialization

• All fields are optional and null values are not serialized
• This allows the database to store only the indexes actually needed for each field
• The JSON format matches the EQL specification for database storage

Fields

• ore_block_u64_8_256 - ORE block index for 64-bit integers (serialized as “ob”)
• bloom_filter - Bloom filter for approximate match queries (serialized as “bf”)
• hmac_256 - HMAC-SHA256 hash for exact matches (serialized as “hm”)
• selector - Selector value for deterministic encryption (serialized as “s”)
• blake3 - Blake3 hash for exact matches (serialized as “b3”)
• ore_cllw_u64_8 - ORE CLLW fixed-width index for 64-bit values (serialized as “ocf”)
• ore_cllw_var_8 - ORE CLLW variable-width index (serialized as “ocv”)
• ste_vec_index - Structured encryption vector index for containment queries (serialized as “sv”)

Fields

ore_block_u64_8_256: Option<Vec<String>>

bloom_filter: Option<Vec<u16>>

hmac_256: Option<String>

selector: Option<String>

blake3: Option<String>

ore_cllw_u64_8: Option<String>

ore_cllw_var_8: Option<String>

ste_vec_index: Option<Vec<EqlEncryptedBody>>

Trait Implementations

impl Debug for EqlEncryptedIndexes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EqlEncryptedIndexes

fn default() -> EqlEncryptedIndexes

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for EqlEncryptedIndexes

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EqlEncryptedIndexes

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.