Struct AuditQuery 

pub struct AuditQuery {
    pub coordinate: Option<String>,
    pub environment: Option<String>,
    pub component: Option<String>,
    pub since: Option<String>,
    pub until: Option<String>,
    pub action: Option<AuditAction>,
}

A filter over audit events for kovra audit (L12). All set conditions AND together; a None field is unconstrained. Time bounds compare RFC-3339 strings, which sort chronologically for the UTC Z timestamps the sink writes.

Fields

coordinate: Option<String>

Exact coordinate (env/component/key).

environment: Option<String>

Environment segment.

component: Option<String>

Component segment (the middle of the coordinate).

since: Option<String>

Only events at/after this RFC-3339 instant (inclusive).

until: Option<String>

Only events at/before this RFC-3339 instant (inclusive).

action: Option<AuditAction>

Only this action kind.

Implementations

impl AuditQuery

pub fn matches(&self, ev: &AuditEvent) -> bool

Whether ev satisfies every set constraint.

Trait Implementations

impl Clone for AuditQuery

fn clone(&self) -> AuditQuery

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditQuery

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditQuery

fn default() -> AuditQuery

Returns the “default value” for a type.