pub struct RiskOutput {
pub kept: ProcessResult,
pub risk_events: Vec<Value>,
pub incidents: Vec<RiskIncidentResult>,
}Expand description
Output of RiskLayer::process: the annotated pass-through results and the
additive risk events (opt-in).
Fields§
§kept: ProcessResultAnnotated detections, flowing on to the alert pipeline and the sinks.
risk_events: Vec<Value>Compact risk events, one per (detection, risk object) pair, dispatched
as additive NDJSON (optionally to a dedicated subject). Empty unless
emit_risk_events is set.
incidents: Vec<RiskIncidentResult>High-fidelity risk incidents emitted when an entity crossed a threshold, dispatched via the incident path (optionally to a dedicated subject).
Trait Implementations§
Source§impl Debug for RiskOutput
impl Debug for RiskOutput
Source§impl Default for RiskOutput
impl Default for RiskOutput
Source§fn default() -> RiskOutput
fn default() -> RiskOutput
Returns the “default value” for a type. Read more
Auto Trait Implementations§
impl Freeze for RiskOutput
impl RefUnwindSafe for RiskOutput
impl Send for RiskOutput
impl Sync for RiskOutput
impl Unpin for RiskOutput
impl UnsafeUnpin for RiskOutput
impl UnwindSafe for RiskOutput
Blanket Implementations§
Source§impl<T> AnyExt for T
impl<T> AnyExt for T
Source§fn downcast_ref<T>(this: &Self) -> Option<&T>where
T: Any,
fn downcast_ref<T>(this: &Self) -> Option<&T>where
T: Any,
Attempts to downcast this to
T behind referenceSource§fn downcast_mut<T>(this: &mut Self) -> Option<&mut T>where
T: Any,
fn downcast_mut<T>(this: &mut Self) -> Option<&mut T>where
T: Any,
Attempts to downcast this to
T behind mutable referenceSource§fn downcast_rc<T>(this: Rc<Self>) -> Result<Rc<T>, Rc<Self>>where
T: Any,
fn downcast_rc<T>(this: Rc<Self>) -> Result<Rc<T>, Rc<Self>>where
T: Any,
Attempts to downcast this to
T behind Rc pointerSource§fn downcast_arc<T>(this: Arc<Self>) -> Result<Arc<T>, Arc<Self>>where
T: Any,
fn downcast_arc<T>(this: Arc<Self>) -> Result<Arc<T>, Arc<Self>>where
T: Any,
Attempts to downcast this to
T behind Arc pointerSource§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
Source§impl<T, X> CoerceTo<T> for Xwhere
T: CoerceFrom<X> + ?Sized,
impl<T, X> CoerceTo<T> for Xwhere
T: CoerceFrom<X> + ?Sized,
fn coerce_rc_to(self: Rc<X>) -> Rc<T>
fn coerce_box_to(self: Box<X>) -> Box<T>
fn coerce_ref_to(&self) -> &T
fn coerce_mut_to(&mut self) -> &mut T
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more