Struct ProcessEntity 

#[non_exhaustive]
pub struct ProcessEntity {
    pub cmd_line: Option<String>,
    pub cpid: Option<String>,
    pub created_time: Option<i64>,
    pub created_time_dt: Option<String>,
    pub name: Option<String>,
    pub path: Option<String>,
    pub pid: Option<i64>,
    pub uid: Option<String>,
}

Process Entity

The Process Entity object provides critical fields for referencing a process.

[] Category: | Name: process_entity

Constraints:

• at_least_one: [name,uid]

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

cmd_line: Option<String>

Command Line

The full command line used to launch an application, service, process, or job. For example: ssh user@10.0.0.10. If the command line is unavailable or missing, the empty string ‘’ is to be used.

recommended

cpid: Option<String>

Common Process Identifier

A unique process identifier that can be assigned deterministically by multiple system data producers.

recommended

created_time: Option<i64>

Created Time

The time when the process was created/started.

recommended

created_time_dt: Option<String>

Created Time

The time when the process was created/started.

optional

name: Option<String>

Name

The friendly name of the process, for example: Notepad++.

recommended

path: Option<String>

Path

The process file path.

optional

pid: Option<i64>

Process ID

The process identifier, as reported by the operating system. Process ID (PID) is a number used by the operating system to uniquely identify an active process.

recommended

uid: Option<String>

Unique ID

A unique identifier for this process assigned by the producer (tool). Facilitates correlation of a process event with other events for that process.

recommended

Trait Implementations

impl Clone for ProcessEntity

fn clone(&self) -> ProcessEntity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessEntity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProcessEntity

fn default() -> ProcessEntity

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ProcessEntity

where ProcessEntity: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ProcessEntity

fn eq(&self, other: &ProcessEntity) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProcessEntity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ProcessEntity