Struct PlainEvent 

pub struct PlainEvent { /* private fields */ }

Raw log line event (keyword matching only).

get_field always returns None. Useful for keyword-only Sigma rules.

Implementations

impl PlainEvent

pub fn new(raw: String) -> Self

pub fn raw(&self) -> &str

Trait Implementations

impl Clone for PlainEvent

fn clone(&self) -> PlainEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PlainEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Event for PlainEvent

fn get_field(&self, _path: &str) -> Option<EventValue<'_>>

Look up a field by name. Supports dot-notation for nested access.

fn any_string_value(&self, pred: &dyn Fn(&str) -> bool) -> bool

Check if any string value anywhere in the event satisfies a predicate. Used by keyword detection.

fn all_string_values(&self) -> Vec<Cow<'_, str>>

Collect all string values in the event.

fn to_json(&self) -> Value

Materialize the event as a serde_json::Value.