Struct SchemaPredicateConfig 

pub struct SchemaPredicateConfig {
    pub field_present: Option<String>,
    pub field_absent: Option<String>,
    pub any_of: Option<Vec<String>>,
    pub equals: Option<FieldValueConfig>,
    pub matches: Option<FieldValueConfig>,
}

A predicate as written in YAML: a single-key map, for example field_present: ecs.version or equals: { field: type, value: alert }. Exactly one form must be set per list entry.

Fields

field_present: Option<String>

field_present: <field>

field_absent: Option<String>

field_absent: <field>

any_of: Option<Vec<String>>

any_of: [<field>, ...]

equals: Option<FieldValueConfig>

equals: { field: <field>, value: <value> }

matches: Option<FieldValueConfig>

matches: { field: <field>, value: <regex> }

Trait Implementations

impl Clone for SchemaPredicateConfig

fn clone(&self) -> SchemaPredicateConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SchemaPredicateConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SchemaPredicateConfig

fn default() -> SchemaPredicateConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SchemaPredicateConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.