#[non_exhaustive]pub struct AuditEvent {
pub timestamp: Duration,
pub key_name: String,
pub kind: AccessKind,
pub thread_id: ThreadId,
pub note: Cow<'static, str>,
}Expand description
Single record in the vault’s audit trail.
Constructed by the vault on every operation; passed to the
configured AuditSink. All fields are non-secret and safe to ship
to log aggregators / SIEM systems.
#[non_exhaustive] — additional fields (caller identity, request
id correlation, etc.) may be added in minor releases.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.timestamp: DurationTime the event was emitted, expressed as a Duration since the
Unix epoch. Same encoding used by KeyMetadata
for portability to future no_std builds.
key_name: StringLogical name of the key. For one-shot fragment/defragment
operations (no registry entry) the value is the empty string.
For master-unlock attempts the reserved name "<master>" is
used.
kind: AccessKindOperation discriminant.
thread_id: ThreadIdThread that produced the event.
note: Cow<'static, str>Caller-supplied free-text label. Never includes key material.
Trait Implementations§
Source§impl Clone for AuditEvent
impl Clone for AuditEvent
Source§fn clone(&self) -> AuditEvent
fn clone(&self) -> AuditEvent
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more