Enum ConditionTrace 

pub enum ConditionTrace {
    Selection {
        name: String,
        matched: bool,
        detection: DetectionTrace,
    },
    And {
        matched: bool,
        children: Vec<ConditionTrace>,
    },
    Or {
        matched: bool,
        children: Vec<ConditionTrace>,
    },
    Not {
        matched: bool,
        child: Box<ConditionTrace>,
    },
    Quantified {
        quantifier: String,
        matched: bool,
        need: u64,
        got: u64,
        branches: Vec<SelectionBranch>,
    },
}

A node in the explained condition tree, mirroring ConditionExpr.

Variants

Selection

A named selection reference (selection), with its detection trace.

Fields

name: String

matched: bool

detection: DetectionTrace

And

a and b and ....

Fields

matched: bool

children: Vec<ConditionTrace>

Or

a or b or ....

Fields

matched: bool

children: Vec<ConditionTrace>

Not

not a.

Fields

matched: bool

child: Box<ConditionTrace>

Quantified

A quantified selector such as 1 of selection_* or all of them.

Fields

quantifier: String

The quantifier as written: any, all, or a count.

matched: bool

need: u64

How many matching selections were required.

got: u64

How many matching selections actually matched.

branches: Vec<SelectionBranch>

Per-selection detail for every selection the pattern matched.

Implementations

impl ConditionTrace

pub fn matched(&self) -> bool

The verdict recorded for this node.

Trait Implementations

impl Clone for ConditionTrace

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConditionTrace

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for ConditionTrace

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.