Struct Timespan 

pub struct Timespan {
    pub count: u64,
    pub unit: TimespanUnit,
    pub seconds: u64,
    pub original: String,
}

A parsed timespan like 1h, 15s, 30m, 7d.

Reference: pySigma correlations.py SigmaCorrelationTimespan

Fields

count: u64

unit: TimespanUnit

seconds: u64

Equivalent duration in seconds (approximate for Month/Year).

original: String

Original string representation.

Implementations

impl Timespan

pub fn parse(s: &str) -> Result<Self>

Parse a timespan string like "1h", "15s", "30m", "7d".

Supported units: s (second), m (minute), h (hour), d (day), w (week), M (month ≈ 30.44 days), y (year ≈ 365.25 days).

Trait Implementations

impl Clone for Timespan

fn clone(&self) -> Timespan

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Timespan

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Timespan

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Timespan

fn eq(&self, other: &Timespan) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Timespan

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for Timespan

impl StructuralPartialEq for Timespan