Struct UserActivity 

pub struct UserActivity {
    pub timestamp: Option<i64>,
    pub actor: Option<String>,
    pub action: Action,
    pub subject: Subject,
    pub source: SourceKind,
    pub detail: String,
}

One normalized user-activity event: who did what, when, to which subject.

Fields

timestamp: Option<i64>

Unix epoch seconds, when the source records it. None when the source carries no usable timestamp (e.g. plain bash / PowerShell PSReadLine).

actor: Option<String>

The acting user / SID, when the source attributes it. Most v0.1 sources do not attribute a user; SRUM (v0.2) is the first by-SID source.

action: Action

What was done.

subject: Subject

What it was done to.

source: SourceKind

Which reader produced this event.

detail: String

A human-readable detail string for the event.

Trait Implementations

impl Clone for UserActivity

fn clone(&self) -> UserActivity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserActivity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for UserActivity

impl PartialEq for UserActivity

fn eq(&self, other: &UserActivity) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for UserActivity