pub struct AnalysisOptions {
pub default_scope: Scope,
pub default_event_type: Type,
pub custom_types: HashSet<StrRef>,
pub data_sources: FxHashMap<StrRef, Type>,
}Expand description
Configuration options for static analysis.
This structure contains the type information needed to perform static analysis on EventQL queries, including the default scope with built-in functions and the type information for event records.
Fields§
§default_scope: ScopeThe default scope containing built-in functions and their type signatures.
default_event_type: TypeType information for event records being queried.
custom_types: HashSet<StrRef>Custom types that are not defined in the EventQL reference.
This set allows users to register custom type names that can be used
in type conversion expressions (e.g., field AS CustomType). Custom
type names are case-insensitive.
data_sources: FxHashMap<StrRef, Type>Per-data-source type overrides.
When a query targets a named data source, this map is checked first. If a match is
found, the associated type is used instead of default_event_type.
Keys are case-insensitive data source names.