Enum ExemplarRuleKind 

pub enum ExemplarRuleKind {
    Detection,
    Correlation,
    Filter,
}

Which kind of Sigma document an exemplar list is attached to.

Variants

Detection

A stateless detection rule (event: payload).

Correlation

A stateful correlation rule (events: payload).

Filter

A filter rule (must not carry exemplars).

Trait Implementations

impl Clone for ExemplarRuleKind

fn clone(&self) -> ExemplarRuleKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ExemplarRuleKind

impl Debug for ExemplarRuleKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ExemplarRuleKind

impl PartialEq for ExemplarRuleKind

fn eq(&self, other: &ExemplarRuleKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ExemplarRuleKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ExemplarRuleKind