Struct FieldAlias 

pub struct FieldAlias {
    pub alias: String,
    pub mapping: HashMap<String, String>,
}

Field alias mapping in a correlation rule.

Maps a canonical alias name to per-rule field name mappings.

Reference: pySigma correlations.py SigmaCorrelationFieldAlias

Fields

alias: String

mapping: HashMap<String, String>

Maps rule reference (ID or name) → field name in that rule’s events.

Trait Implementations

impl Clone for FieldAlias

fn clone(&self) -> FieldAlias

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FieldAlias

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for FieldAlias

fn eq(&self, other: &FieldAlias) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for FieldAlias

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for FieldAlias

impl StructuralPartialEq for FieldAlias