pub struct AlertPipelineFile {
pub strip_event: bool,
pub scope: Option<ScopeConfig>,
pub dedup: Option<DedupFile>,
pub group: Option<GroupFile>,
pub silences: Vec<SilenceSpec>,
pub max_silences: Option<usize>,
pub inhibit_rules: Vec<InhibitRuleFile>,
}Expand description
Top-level alert-pipeline config file.
strip_event: false
scope:
levels: [high, critical]
dedup:
fingerprint:
- rule
- match.SourceIp
repeat_interval: 1h
resolve_timeout: 30mFields§
§strip_event: boolRetain the event for selector resolution but drop raw event payloads before sink delivery.
scope: Option<ScopeConfig>Restrict which results the layer acts on. Out-of-scope results pass through untouched.
dedup: Option<DedupFile>Fingerprint deduplication. Omitted means no dedup.
group: Option<GroupFile>Incident grouping. Omitted means no grouping.
silences: Vec<SilenceSpec>Static silences seeded at load and re-seeded on hot-reload. Dynamic silences created over the API are independent of this list.
max_silences: Option<usize>Ceiling on concurrently-tracked dynamic (API) silences. Creation past
this many is rejected with 429. Defaults to 1000.
inhibit_rules: Vec<InhibitRuleFile>Inhibition rules. An active source mutes matching targets.
Trait Implementations§
Source§impl Clone for AlertPipelineFile
impl Clone for AlertPipelineFile
Source§fn clone(&self) -> AlertPipelineFile
fn clone(&self) -> AlertPipelineFile
Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl Debug for AlertPipelineFile
impl Debug for AlertPipelineFile
Source§impl Default for AlertPipelineFile
impl Default for AlertPipelineFile
Source§fn default() -> AlertPipelineFile
fn default() -> AlertPipelineFile
Returns the “default value” for a type. Read more
Source§impl<'de> Deserialize<'de> for AlertPipelineFile
impl<'de> Deserialize<'de> for AlertPipelineFile
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
Auto Trait Implementations§
impl Freeze for AlertPipelineFile
impl RefUnwindSafe for AlertPipelineFile
impl Send for AlertPipelineFile
impl Sync for AlertPipelineFile
impl Unpin for AlertPipelineFile
impl UnsafeUnpin for AlertPipelineFile
impl UnwindSafe for AlertPipelineFile
Blanket Implementations§
Source§impl<T> AnyExt for T
impl<T> AnyExt for T
Source§fn downcast_ref<T>(this: &Self) -> Option<&T>where
T: Any,
fn downcast_ref<T>(this: &Self) -> Option<&T>where
T: Any,
Attempts to downcast this to
T behind referenceSource§fn downcast_mut<T>(this: &mut Self) -> Option<&mut T>where
T: Any,
fn downcast_mut<T>(this: &mut Self) -> Option<&mut T>where
T: Any,
Attempts to downcast this to
T behind mutable referenceSource§fn downcast_rc<T>(this: Rc<Self>) -> Result<Rc<T>, Rc<Self>>where
T: Any,
fn downcast_rc<T>(this: Rc<Self>) -> Result<Rc<T>, Rc<Self>>where
T: Any,
Attempts to downcast this to
T behind Rc pointerSource§fn downcast_arc<T>(this: Arc<Self>) -> Result<Arc<T>, Arc<Self>>where
T: Any,
fn downcast_arc<T>(this: Arc<Self>) -> Result<Arc<T>, Arc<Self>>where
T: Any,
Attempts to downcast this to
T behind Arc pointerSource§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T, X> CoerceTo<T> for Xwhere
T: CoerceFrom<X> + ?Sized,
impl<T, X> CoerceTo<T> for Xwhere
T: CoerceFrom<X> + ?Sized,
fn coerce_rc_to(self: Rc<X>) -> Rc<T>
fn coerce_box_to(self: Box<X>) -> Box<T>
fn coerce_ref_to(&self) -> &T
fn coerce_mut_to(&mut self) -> &mut T
impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more