Enum ResultBody 

pub enum ResultBody {
    Detection(DetectionBody),
    Correlation(CorrelationBody),
}

Kind-specific payload of an EvaluationResult.

Serialized as an untagged enum so the variant fields flatten directly into the parent JSON object. Downstream consumers disambiguate variants by the kind-unique fields each variant carries (matched_fields for detection, correlation_type for correlation).

Invariant: each variant must keep at least one required, kind-unique field. This is what lets the untagged enum disambiguate on a future Deserialize and keeps the correlation_type-presence rule reliable for existing consumers.

Variants

Detection(DetectionBody)

Detection rule match (stateless, immediate).

Correlation(CorrelationBody)

Correlation rule firing (stateful, time-windowed).

Trait Implementations

impl Clone for ResultBody

fn clone(&self) -> ResultBody

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ResultBody

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for ResultBody

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.