Struct osquery_types::ProcessEvent

pub struct ProcessEvent<'a> {
    pub action: &'a str,
    pub unix_time: u64,
    pub columns: ProcessEventColumns<'a>,
    pub host_identifier: &'a str,
    pub decorations: Option<HashMap<&'a str, &'a str>>,
}

Fields

action: &'a str

"action": "added" OR "removed",

unix_time: u64

"unixTime": 1527895550,

columns: ProcessEventColumns<'a>

"columns": {//see ProcessEventColumns},

host_identifier: &'a str

"hostIdentifier": "vagrant",

decorations: Option<HashMap<&'a str, &'a str>>

Trait Implementations

impl<'a> Serialize for ProcessEvent<'a>

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl<'de: 'a, 'a> Deserialize<'de> for ProcessEvent<'a>

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.