pub enum ArrayQuantifier {
Any,
All,
AllOrEmpty,
None,
}Expand description
Quantifier for matching the members of an array-valued field.
Used by array object-scope blocks (field[any]: / field[all]:). This is
deliberately distinct from the all value-list modifier (Modifier::All),
which links several values of one field with AND. An array quantifier
instead ranges over the members of an array-valued field.
Reference: proposed Sigma array-matching extension (sigma-specification Discussion #106).
Variants§
Any
At least one array member must satisfy the nested detection.
All
Every array member must satisfy the nested detection, and the array must be non-empty.
AllOrEmpty
Every array member must satisfy the nested detection, but an empty or
missing array also matches (the vacuously-true reading of All).
None
No array member satisfies the nested detection (the dual of Any).
Matches an empty or missing array (vacuously, no member matches).
Trait Implementations§
Source§impl Clone for ArrayQuantifier
impl Clone for ArrayQuantifier
Source§fn clone(&self) -> ArrayQuantifier
fn clone(&self) -> ArrayQuantifier
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreimpl Copy for ArrayQuantifier
Source§impl Debug for ArrayQuantifier
impl Debug for ArrayQuantifier
Source§impl Display for ArrayQuantifier
impl Display for ArrayQuantifier
impl Eq for ArrayQuantifier
Source§impl Hash for ArrayQuantifier
impl Hash for ArrayQuantifier
Source§impl PartialEq for ArrayQuantifier
impl PartialEq for ArrayQuantifier
Source§fn eq(&self, other: &ArrayQuantifier) -> bool
fn eq(&self, other: &ArrayQuantifier) -> bool
self and other values to be equal, and is used by ==.Source§impl Serialize for ArrayQuantifier
impl Serialize for ArrayQuantifier
impl StructuralPartialEq for ArrayQuantifier
Auto Trait Implementations§
impl Freeze for ArrayQuantifier
impl RefUnwindSafe for ArrayQuantifier
impl Send for ArrayQuantifier
impl Sync for ArrayQuantifier
impl Unpin for ArrayQuantifier
impl UnsafeUnpin for ArrayQuantifier
impl UnwindSafe for ArrayQuantifier
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
key and return true if they are equal.