Struct usiem::components::alert::SiemAlert

pub struct SiemAlert {
    pub title: String,
    pub description: String,
    pub severity: AlertSeverity,
    pub date: i64,
    pub tags: Vec<String>,
    pub techniques: Vec<MitreTechniques>,
    pub rule: String,
    pub log: SiemLog,
    pub aggr_limit: i64,
    pub aggr_key: String,
}

Basic Alert format

Fields

title: String

description: String

severity: AlertSeverity

Severity of the alert

date: i64

When the alert was generated

tags: Vec<String>

List of tags to be added to the alert

techniques: Vec<MitreTechniques>

List of MitreAtack Techniques

rule: String

Name of the rule that generated the alert

log: SiemLog

The log that triggered this alert

aggr_limit: i64

Time at witch the Alert system must create a new case

aggr_key: String

Key to be used in the aggregation of alerts as to join multiple alerts into one

Trait Implementations

impl Clone for SiemAlert

fn clone(&self) -> SiemAlert

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SiemAlert

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for SiemAlert

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>where
    __S: Serializer,

Serialize this value into the given Serde serializer.