Struct BaseEvent

pub struct BaseEvent {

    pub activity_id: BaseEventActivityId,
    pub activity_name: Option<String>,
    pub api: Option<Api>,
    pub category_name: Option<String>,
    pub category_uid: i64,
    pub class_name: Option<String>,
    pub class_uid: i64,
    pub cloud: Cloud,
    pub count: Option<i64>,
    pub duration: Option<i64>,
    pub end_time: Option<i64>,
    pub end_time_dt: Option<String>,
    pub enrichments: Vec<Enrichment>,
    pub message: Option<String>,
    pub metadata: Metadata,
    pub observables: Vec<Observable>,
    pub osint: Vec<Osint>,
    pub raw_data: Option<String>,
    pub severity: Option<String>,
    pub severity_id: BaseEventSeverityId,
    pub start_time: Option<i64>,
    pub start_time_dt: Option<String>,
    pub status: Option<String>,
    pub status_code: Option<String>,
    pub status_detail: Option<String>,
    pub status_id: Option<BaseEventStatusId>,
    pub time: i64,
    pub time_dt: Option<String>,
    pub timezone_offset: Option<i64>,
    pub type_name: Option<String>,
    pub type_uid: i64,
    pub unmapped: Option<Object>,
}

BaseEvent

JSON schema

{
 "$id": "https://schema.ocsf.io/schema/classes/base_event",
 "type": "object",
 "required": [
   "activity_id",
   "category_uid",
   "class_uid",
   "cloud",
   "metadata",
   "osint",
   "severity_id",
   "time",
   "type_uid"
 ],
 "properties": {
   "activity_id": {
     "type": "integer",
     "enum": [
       0,
       99
     ]
   },
   "activity_name": {
     "type": "string"
   },
   "api": {
     "$ref": "#/$defs/api"
   },
   "category_name": {
     "type": "string"
   },
   "category_uid": {
     "type": "integer",
     "const": 0
   },
   "class_name": {
     "type": "string"
   },
   "class_uid": {
     "type": "integer",
     "const": 0
   },
   "cloud": {
     "$ref": "#/$defs/cloud"
   },
   "count": {
     "type": "integer"
   },
   "duration": {
     "type": "integer"
   },
   "end_time": {
     "type": "integer"
   },
   "end_time_dt": {
     "type": "string"
   },
   "enrichments": {
     "type": "array",
     "items": {
       "$ref": "#/$defs/enrichment"
     }
   },
   "message": {
     "type": "string"
   },
   "metadata": {
     "$ref": "#/$defs/metadata"
   },
   "observables": {
     "type": "array",
     "items": {
       "$ref": "#/$defs/observable"
     }
   },
   "osint": {
     "type": "array",
     "items": {
       "$ref": "#/$defs/osint"
     }
   },
   "raw_data": {
     "type": "string"
   },
   "severity": {
     "type": "string"
   },
   "severity_id": {
     "type": "integer",
     "enum": [
       3,
       6,
       0,
       1,
       2,
       99,
       4,
       5
     ]
   },
   "start_time": {
     "type": "integer"
   },
   "start_time_dt": {
     "type": "string"
   },
   "status": {
     "type": "string"
   },
   "status_code": {
     "type": "string"
   },
   "status_detail": {
     "type": "string"
   },
   "status_id": {
     "type": "integer",
     "enum": [
       0,
       1,
       2,
       99
     ]
   },
   "time": {
     "type": "integer"
   },
   "time_dt": {
     "type": "string"
   },
   "timezone_offset": {
     "type": "integer"
   },
   "type_name": {
     "type": "string"
   },
   "type_uid": {
     "type": "integer"
   },
   "unmapped": {
     "$ref": "#/$defs/object"
   }
 },
 "$schema": "http://json-schema.org/draft-07/schema#"
}

Fields

activity_id: BaseEventActivityId

activity_name: Option<String>

api: Option<Api>

category_name: Option<String>

category_uid: i64

class_name: Option<String>

class_uid: i64

cloud: Cloud

count: Option<i64>

duration: Option<i64>

end_time: Option<i64>

end_time_dt: Option<String>

enrichments: Vec<Enrichment>

message: Option<String>

metadata: Metadata

observables: Vec<Observable>

osint: Vec<Osint>

raw_data: Option<String>

severity: Option<String>

severity_id: BaseEventSeverityId

start_time: Option<i64>

start_time_dt: Option<String>

status: Option<String>

status_code: Option<String>

status_detail: Option<String>

status_id: Option<BaseEventStatusId>

time: i64

time_dt: Option<String>

timezone_offset: Option<i64>

type_name: Option<String>

type_uid: i64

unmapped: Option<Object>

Implementations

impl BaseEvent

pub fn builder() -> BaseEvent

Trait Implementations

impl Clone for BaseEvent

fn clone(&self) -> BaseEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BaseEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for BaseEvent

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl From<&BaseEvent> for BaseEvent

fn from(value: &BaseEvent) -> Self

Converts to this type from the input type.

impl From<BaseEvent> for BaseEvent

fn from(value: BaseEvent) -> Self

Converts to this type from the input type.

impl Serialize for BaseEvent

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl TryFrom<BaseEvent> for BaseEvent

type Error = ConversionError

The type returned in the event of a conversion error.

fn try_from(value: BaseEvent) -> Result<Self, ConversionError>

Performs the conversion.