Struct CorrelationSnapshot 

pub struct CorrelationSnapshot {
    pub version: u32,
    pub windows: HashMap<String, Vec<(GroupKey, WindowState)>>,
    pub last_alert: HashMap<String, Vec<(GroupKey, i64)>>,
    pub event_buffers: HashMap<String, Vec<(GroupKey, EventBuffer)>>,
    pub event_ref_buffers: HashMap<String, Vec<(GroupKey, EventRefBuffer)>>,
}

Serializable snapshot of all mutable correlation state.

Uses stable string identifiers (correlation id/name/title) as keys so the snapshot can be restored after a rule reload, even if internal indices change. Inner maps use Vec<(GroupKey, T)> instead of HashMap<GroupKey, T> because GroupKey cannot be used as a JSON object key.

Fields

version: u32

Schema version — used to detect incompatible snapshots on load.

windows: HashMap<String, Vec<(GroupKey, WindowState)>>

Per-correlation, per-group window state.

last_alert: HashMap<String, Vec<(GroupKey, i64)>>

Per-correlation, per-group last alert timestamp (for suppression).

event_buffers: HashMap<String, Vec<(GroupKey, EventBuffer)>>

Per-correlation, per-group compressed event buffers.

event_ref_buffers: HashMap<String, Vec<(GroupKey, EventRefBuffer)>>

Per-correlation, per-group event reference buffers.

Trait Implementations

impl Clone for CorrelationSnapshot

fn clone(&self) -> CorrelationSnapshot

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorrelationSnapshot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CorrelationSnapshot

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CorrelationSnapshot

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.