Struct InputsUsed 

#[non_exhaustive]
pub struct InputsUsed {
    pub uses_udm: bool,
    pub uses_entity: bool,
    pub uses_detection: bool,
    /* private fields */
}

InputsUsed is a convenience field that tells us which sources of events (if any) were used in the rule. NEXT TAG: 4

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

uses_udm: bool

Optional. Whether the rule queries UDM events.

uses_entity: bool

Optional. Whether the rule queries entity events.

uses_detection: bool

Optional. Whether the rule queries detections.

Implementations

impl InputsUsed

pub fn new() -> Self

Creates a new default instance.

pub fn set_uses_udm<T: Into<bool>>(self, v: T) -> Self

Sets the value of uses_udm.

Example

let x = InputsUsed::new().set_uses_udm(true);

pub fn set_uses_entity<T: Into<bool>>(self, v: T) -> Self

Sets the value of uses_entity.

Example

let x = InputsUsed::new().set_uses_entity(true);

pub fn set_uses_detection<T: Into<bool>>(self, v: T) -> Self

Sets the value of uses_detection.

Example

let x = InputsUsed::new().set_uses_detection(true);

Trait Implementations

impl Clone for InputsUsed

fn clone(&self) -> InputsUsed

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for InputsUsed

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for InputsUsed

fn default() -> InputsUsed

Returns the “default value” for a type.

impl Message for InputsUsed

fn typename() -> &'static str

The typename of this message.

impl PartialEq for InputsUsed

fn eq(&self, other: &InputsUsed) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for InputsUsed