Struct LogsLookupProcessor

#[non_exhaustive]
pub struct LogsLookupProcessor {
    pub default_lookup: Option<String>,
    pub is_enabled: Option<bool>,
    pub lookup_table: Vec<String>,
    pub name: Option<String>,
    pub source: String,
    pub target: String,
    pub type_: LogsLookupProcessorType,
    pub additional_properties: BTreeMap<String, Value>,
    /* private fields */
}

Use the Lookup Processor to define a mapping between a log attribute and a human readable value saved in the processors mapping table. For example, you can use the Lookup Processor to map an internal service ID into a human readable service name. Alternatively, you could also use it to check if the MAC address that just attempted to connect to the production environment belongs to your list of stolen machines.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

default_lookup: Option<String>

Value to set the target attribute if the source value is not found in the list.

is_enabled: Option<bool>

Whether or not the processor is enabled.

lookup_table: Vec<String>

Mapping table of values for the source attribute and their associated target attribute values, formatted as ["source_key1,target_value1", "source_key2,target_value2"]

name: Option<String>

Name of the processor.

source: String

Source attribute used to perform the lookup.

target: String

Name of the attribute that contains the corresponding value in the mapping list or the default_lookup if not found in the mapping list.

type_: LogsLookupProcessorType

Type of logs lookup processor.

additional_properties: BTreeMap<String, Value>

Implementations

impl LogsLookupProcessor

pub fn new( lookup_table: Vec<String>, source: String, target: String, type_: LogsLookupProcessorType, ) -> LogsLookupProcessor

pub fn default_lookup(self, value: String) -> Self

pub fn is_enabled(self, value: bool) -> Self

pub fn name(self, value: String) -> Self

pub fn additional_properties(self, value: BTreeMap<String, Value>) -> Self

Trait Implementations

impl Clone for LogsLookupProcessor

fn clone(&self) -> LogsLookupProcessor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LogsLookupProcessor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for LogsLookupProcessor

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for LogsLookupProcessor

fn eq(&self, other: &LogsLookupProcessor) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for LogsLookupProcessor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for LogsLookupProcessor