pub enum EventValues<'a> {
Single(Body<'a>),
Multi(Vec<Body<'a>>),
}Expand description
Collect records in [EventBody] context as single or multiple
instances.
Examples for single instances are SYSCALL,EXECVE (even if the
latter can be split across multiple lines). An example for
multiple instances is PATH.
“Multi” records are serialized as list-of-maps ([ { "key": "value", … }, { "key": "value", … } … ])
Variants§
Trait Implementations§
Source§impl<'a> Clone for EventValues<'a>
impl<'a> Clone for EventValues<'a>
Source§fn clone(&self) -> EventValues<'a>
fn clone(&self) -> EventValues<'a>
Returns a duplicate of the value. Read more
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl<'a> Debug for EventValues<'a>
impl<'a> Debug for EventValues<'a>
Source§impl<'de, 'a> Deserialize<'de> for EventValues<'a>
impl<'de, 'a> Deserialize<'de> for EventValues<'a>
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations§
impl<'a> Freeze for EventValues<'a>
impl<'a> RefUnwindSafe for EventValues<'a>
impl<'a> Send for EventValues<'a>
impl<'a> Sync for EventValues<'a>
impl<'a> !Unpin for EventValues<'a>
impl<'a> UnwindSafe for EventValues<'a>
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more