Struct Alert 

pub struct Alert {
    pub rule_name: String,
    pub severity: RuleSeverity,
    pub title: String,
    pub triggered_at: DateTime<Utc>,
    pub evidence: Vec<TimelineEvent>,
    pub description: String,
}

An alert generated when a correlation rule fires.

Fields

rule_name: String

Rule name that generated this alert.

severity: RuleSeverity

Severity level.

title: String

Alert title from rule output.

triggered_at: DateTime<Utc>

When the alert was triggered (timestamp of the final matching event).

evidence: Vec<TimelineEvent>

Evidence: the timeline events that contributed to this alert.

description: String

Alert description from rule.

Trait Implementations

impl Clone for Alert

fn clone(&self) -> Alert

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Alert

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for Alert

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.