LogData

Struct LogData 

Source
pub struct LogData {
Show 19 fields pub subsystem: String, pub thread_id: u64, pub pid: u64, pub euid: u32, pub library: String, pub library_uuid: String, pub activity_id: u64, pub time: f64, pub category: String, pub event_type: EventType, pub log_type: LogType, pub process: String, pub process_uuid: String, pub message: String, pub raw_message: String, pub boot_uuid: String, pub timezone_name: String, pub message_entries: Vec<FirehoseItemInfo>, pub timestamp: String,
}

Fields§

§subsystem: String§thread_id: u64§pid: u64§euid: u32§library: String§library_uuid: String§activity_id: u64§time: f64§category: String§event_type: EventType§log_type: LogType§process: String§process_uuid: String§message: String§raw_message: String§boot_uuid: String§timezone_name: String§message_entries: Vec<FirehoseItemInfo>§timestamp: String

Implementations§

Source§

impl LogData

Source

pub fn parse_unified_log(data: &[u8]) -> IResult<&[u8], UnifiedLogData>

Parse the Unified log data read from a tracev3 file

Source

pub fn build_log( unified_log_data: &UnifiedLogData, provider: &mut dyn FileProvider, timesync_data: &HashMap<String, TimesyncBoot>, exclude_missing: bool, ) -> (Vec<LogData>, UnifiedLogData)

Reconstruct Unified Log entries using the binary strings data, cached strings data, timesync data, and unified log. Provide bool to ignore log entries that are not able to be recontructed (additional tracev3 files needed) Return a reconstructed log entries and any leftover Unified Log entries that could not be reconstructed (data may be stored in other tracev3 files)

Trait Implementations§

Source§

impl Debug for LogData

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Serialize for LogData

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.