es4forensics 0.5.1

Import several timelines into elasticsearch
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

use std::collections::HashMap;

use serde::{Serialize, Deserialize};
use serde_json::Value;

use crate::{timestamp::Timestamp, utils::json::add_to_json};

#[derive(Serialize, Deserialize)]
pub struct SimpleEvent {
    
}

impl SimpleEvent {
    #[allow(dead_code)]
    pub fn documents(&self) -> impl Iterator<Item=Value> {
        let docs: HashMap<Timestamp, Value> = HashMap::new();
        docs.into_iter().map(|(ts, v)| {
            add_to_json(&v, "|@timestamp|", Value::Number(ts.timestamp_millis().into()))
        })
    }
}