Expand description
NDJSON and YAML representations of the same Rule model.
Kibana exports and imports NDJSON, so it preserves rule fidelity. YAML is easier to review.
Structs§
- Bundle
- An export bundle split into its four line kinds.
Enums§
Functions§
- decode_
bundle - Decode a
_exportbody into rules, exception lists, exception items, and the trailer. Every non-empty line must classify as one of the four; an unclassifiable line is an error naming its line number. - decode_
ndjson - decode_
yaml - encode_
bundle - Encode a bundle as NDJSON in import order: rules, then lists, then items, with no trailer.
- encode_
ndjson - encode_
yaml