Struct KernelObjectQuery

pub struct KernelObjectQuery { /* private fields */ }

Implementations

impl KernelObjectQuery

pub fn activity_id<T>(self, value: T) -> Self

where T: TryInto<KernelObjectQueryActivityId>, T::Error: Display,

pub fn activity_name<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn actor<T>(self, value: T) -> Self

where T: TryInto<Option<Actor>>, T::Error: Display,

pub fn api<T>(self, value: T) -> Self

where T: TryInto<Option<Api>>, T::Error: Display,

pub fn category_name<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn category_uid<T>(self, value: T) -> Self

where T: TryInto<i64>, T::Error: Display,

pub fn class_name<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn class_uid<T>(self, value: T) -> Self

where T: TryInto<i64>, T::Error: Display,

pub fn cloud<T>(self, value: T) -> Self

where T: TryInto<Cloud>, T::Error: Display,

pub fn count<T>(self, value: T) -> Self

where T: TryInto<Option<i64>>, T::Error: Display,

pub fn device<T>(self, value: T) -> Self

where T: TryInto<Option<Device>>, T::Error: Display,

pub fn duration<T>(self, value: T) -> Self

where T: TryInto<Option<i64>>, T::Error: Display,

pub fn end_time<T>(self, value: T) -> Self

where T: TryInto<Option<i64>>, T::Error: Display,

pub fn end_time_dt<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn enrichments<T>(self, value: T) -> Self

where T: TryInto<Vec<Enrichment>>, T::Error: Display,

pub fn kernel<T>(self, value: T) -> Self

where T: TryInto<Kernel>, T::Error: Display,

pub fn message<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn metadata<T>(self, value: T) -> Self

where T: TryInto<Metadata>, T::Error: Display,

pub fn observables<T>(self, value: T) -> Self

where T: TryInto<Vec<Observable>>, T::Error: Display,

pub fn osint<T>(self, value: T) -> Self

where T: TryInto<Vec<Osint>>, T::Error: Display,

pub fn query_info<T>(self, value: T) -> Self

where T: TryInto<Option<QueryInfo>>, T::Error: Display,

pub fn query_result<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn query_result_id<T>(self, value: T) -> Self

where T: TryInto<KernelObjectQueryQueryResultId>, T::Error: Display,

pub fn raw_data<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn severity<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn severity_id<T>(self, value: T) -> Self

where T: TryInto<KernelObjectQuerySeverityId>, T::Error: Display,

pub fn start_time<T>(self, value: T) -> Self

where T: TryInto<Option<i64>>, T::Error: Display,

pub fn start_time_dt<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn status<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn status_code<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn status_detail<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn status_id<T>(self, value: T) -> Self

where T: TryInto<Option<KernelObjectQueryStatusId>>, T::Error: Display,

pub fn time<T>(self, value: T) -> Self

where T: TryInto<i64>, T::Error: Display,

pub fn time_dt<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn timezone_offset<T>(self, value: T) -> Self

where T: TryInto<Option<i64>>, T::Error: Display,

pub fn type_name<T>(self, value: T) -> Self

where T: TryInto<Option<String>>, T::Error: Display,

pub fn type_uid<T>(self, value: T) -> Self

where T: TryInto<i64>, T::Error: Display,

pub fn unmapped<T>(self, value: T) -> Self

where T: TryInto<Option<Object>>, T::Error: Display,

Trait Implementations

impl Clone for KernelObjectQuery

fn clone(&self) -> KernelObjectQuery

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelObjectQuery

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KernelObjectQuery

fn default() -> Self

Returns the “default value” for a type.

impl From<KernelObjectQuery> for KernelObjectQuery

fn from(value: KernelObjectQuery) -> Self

Converts to this type from the input type.

impl TryFrom<KernelObjectQuery> for KernelObjectQuery

type Error = ConversionError

The type returned in the event of a conversion error.

fn try_from(value: KernelObjectQuery) -> Result<Self, ConversionError>

Performs the conversion.