Struct ScanScore 

#[non_exhaustive]
pub struct ScanScore<K> {
    pub key: K,
    pub verdict: ScanVerdict,
    pub log_likelihood: f64,
    pub n_observed: u32,
}

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

key: K

verdict: ScanVerdict

log_likelihood: f64

n_observed: u32

Implementations

impl<K> ScanScore<K>

where K: KeyFields + Clone,

pub fn into_anomaly(self, ts: Timestamp) -> OwnedAnomaly

Available on crate feature tracker only.

Convert into the canonical OwnedAnomaly shape with the given timestamp. Severity follows verdict: Scanner → Warning, Benign/Inconclusive → Info.

Metrics emitted: log_likelihood, n_observed. Observations emitted: verdict (slug).

Gated on the tracker feature — OwnedAnomaly lives there.

Trait Implementations

impl<K: Clone> Clone for ScanScore<K>

fn clone(&self) -> ScanScore<K>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<K: Debug> Debug for ScanScore<K>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<K> DetectorScore for ScanScore<K>

where K: KeyFields + Clone,

Available on crate feature tracker only.

fn name(&self) -> &'static str

Stable detector name slug. Used as OwnedAnomaly::kind (which maps to EVE anomaly.event) and as a metric label.

fn into_anomaly(self, ts: Timestamp) -> OwnedAnomaly

Convert into the canonical owned anomaly with the given timestamp.