Struct QueryResult 

pub struct QueryResult {
    pub query_type: QueryType,
    pub matches: Option<Vec<PatternMatch>>,
    pub statistics: Option<StatisticalAnalysis>,
    pub alert: Option<AlertResult>,
    pub summary: Option<SummaryMetrics>,
    pub data: Option<QueryData>,
    pub metadata: QueryMetadata,
}

Comprehensive query result that can contain multiple types of output

Fields

query_type: QueryType

Type of query that was executed

matches: Option<Vec<PatternMatch>>

Pattern matches if this was a find/scan query

statistics: Option<StatisticalAnalysis>

Statistical analysis results

alert: Option<AlertResult>

Alert results

summary: Option<SummaryMetrics>

Combined summary metrics

data: Option<QueryData>

Raw data for custom visualization

metadata: QueryMetadata

Execution metadata

Implementations

impl QueryResult

pub fn new(query_type: QueryType, id: String, timeframe: String) -> Self

Create a new empty result

pub fn with_statistics(self, stats: StatisticalAnalysis) -> Self

Add statistical analysis results

pub fn with_alert(self, alert: AlertResult) -> Self

Add alert results

pub fn calculate_summary(&mut self)

Calculate and add summary metrics

pub fn format_summary(&self) -> String

Format summary as a human-readable string

Trait Implementations

impl Clone for QueryResult

fn clone(&self) -> QueryResult

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for QueryResult

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.