Enum EvalError 

pub enum EvalError {
    InvalidRegex(Error),
    InvalidCidr(AddrParseError),
    Base64(String),
    UnknownDetection(String),
    InvalidModifiers(String),
    IncompatibleValue(String),
    ExpectedNumeric(String),
    Parser(SigmaParserError),
    CorrelationError(String),
    UnknownRuleRef(String),
    CorrelationCycle(String),
    Ir(String),
    HirCache(String),
}

Errors that can occur during rule compilation or evaluation.

Variants

InvalidRegex(Error)

A regex pattern failed to compile.

InvalidCidr(AddrParseError)

A CIDR pattern failed to parse.

Base64(String)

A base64 operation failed.

UnknownDetection(String)

A detection referenced in a condition was not found.

InvalidModifiers(String)

A modifier combination is invalid.

IncompatibleValue(String)

A value type is incompatible with the modifier.

ExpectedNumeric(String)

A numeric value was expected but not found.

Parser(SigmaParserError)

A parser error propagated during compilation.

CorrelationError(String)

A correlation rule compilation or evaluation error.

UnknownRuleRef(String)

A rule referenced by a correlation was not found.

CorrelationCycle(String)

A cycle was detected in correlation rule references.

Ir(String)

An error from the IR lowering pipeline that has no more specific mapping.

HirCache(String)

A HIR cache (de)serialization error.

Trait Implementations

impl Debug for EvalError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EvalError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for EvalError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<AddrParseError> for EvalError

fn from(source: AddrParseError) -> Self

Converts to this type from the input type.

impl From<CacheError> for EvalError

fn from(err: CacheError) -> Self

Converts to this type from the input type.

impl From<Error> for EvalError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<EvalError> for ExemplarRunError

fn from(err: EvalError) -> Self

Converts to this type from the input type.

impl From<IrError> for EvalError

fn from(err: IrError) -> Self

Converts to this type from the input type.

impl From<SigmaParserError> for EvalError

fn from(source: SigmaParserError) -> Self

Converts to this type from the input type.