Enum RuleOperator 

#[non_exhaustive]
pub enum RuleOperator {
    All(Vec<Box<RuleOperator>>),
    Any(Vec<Box<RuleOperator>>),
    Not(Box<RuleOperator>),
    Equals(SiemField),
    StartsWith(String),
    EndsWith(String),
    Contains(String),
    GT(SiemField),
    LT(SiemField),
    GTE(SiemField),
    LTE(SiemField),
    Matches(Regex),
    SameNet((SiemIp, u8)),
    IsLocalIp(bool),
    IsExternalIp(bool),
    Exists(bool),
    IsNull(bool),
    B64(Box<RuleOperator>),
    InDataset(SiemDatasetType),
    ExistsRuleState(Vec<RuleState>),
    InCountry(String),
}

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

All(Vec<Box<RuleOperator>>)

Any(Vec<Box<RuleOperator>>)

Not(Box<RuleOperator>)

Equals(SiemField)

StartsWith(String)

EndsWith(String)

Contains(String)

GT(SiemField)

LT(SiemField)

GTE(SiemField)

LTE(SiemField)

Matches(Regex)

SameNet((SiemIp, u8))

IsLocalIp(bool)

IsExternalIp(bool)

Exists(bool)

IsNull(bool)

B64(Box<RuleOperator>)

InDataset(SiemDatasetType)

ExistsRuleState(Vec<RuleState>)

InCountry(String)

Trait Implementations

impl Clone for RuleOperator

fn clone(&self) -> RuleOperator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuleOperator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RuleOperator

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RuleOperator

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RuleOperator

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.