Enum usiem::events::field::SiemField

pub enum SiemField {
    Text(Cow<'static, str>),
    IP(SiemIp),
    Domain(String),
    User(String),
    AssetID(String),
    U32(u32),
    U64(u64),
    I64(i64),
    F64(f64),
    Date(i64),
}

Variants

Text(Cow<'static, str>)

A basic String field

IP(SiemIp)

IPv4 or IPv6

Domain(String)

User(String)

AssetID(String)

This is a special field. Uniquely identifies an asset like a system, a computer or a mobile phone. Reason: the network is dynamic, the IP address is not fixed certain devices and the hostname of a system can be changed.

This field should be used with a dataset to recover information about an asset during the enchance phase: Getting the IP address, the users logged in the system or another information.

Can be multiple AssetsID associated with the same event because multiple virtual machines can be running in the same asset.

U32(u32)

unsigned number with 32 bits

U64(u64)

unsigned number with 64 bits

I64(i64)

signed number with 64 bits

F64(f64)

decimal number with 64 bits

Date(i64)

A date in a decimal number format with 64 bits

Implementations

impl SiemField

pub fn from_str<S>(val: S) -> SiemField where
    S: Into<Cow<'static, str>>, 

Trait Implementations

impl Clone for SiemField

fn clone(&self) -> SiemField

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SiemField

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for SiemField

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<SiemField> for SiemField

fn eq(&self, other: &Self) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl Serialize for SiemField

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.