Enum SigmaParserError 

#[non_exhaustive]
pub enum SigmaParserError {
    Yaml(Error),
    Condition(String, Option<SourceLocation>),
    UnknownModifier(String),
    NotIsNotAModifier,
    InvalidFieldSpec(String),
    InvalidRule(String),
    MissingField(String),
    InvalidDetection(String),
    InvalidCorrelation(String),
    InvalidTimespan(String),
    InvalidValue(String),
    InvalidAction(String),
    Io(Error),
    MergeTooDeep(usize),
    ConditionTooLong(usize, usize),
}

Errors that can occur during Sigma rule parsing.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Yaml(Error)

Condition(String, Option<SourceLocation>)

UnknownModifier(String)

NotIsNotAModifier

Reserved when a user writes field|not: value or field|contains|not: value as if not were a value modifier. Sigma does not support a |not modifier; negation is expressed at the condition level (not selection or selection and not filter).

InvalidFieldSpec(String)

InvalidRule(String)

MissingField(String)

InvalidDetection(String)

InvalidCorrelation(String)

InvalidTimespan(String)

InvalidValue(String)

InvalidAction(String)

Io(Error)

MergeTooDeep(usize)

ConditionTooLong(usize, usize)

Implementations

impl SigmaParserError

pub fn location(&self) -> Option<SourceLocation>

Returns the source location if this error variant carries one.

Trait Implementations

impl Debug for SigmaParserError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SigmaParserError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for SigmaParserError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for SigmaParserError

fn from(source: Error) -> Self

Converts to this type from the input type.

impl From<Error> for SigmaParserError

fn from(source: Error) -> Self

Converts to this type from the input type.