Struct ExprAggregate 

pub struct ExprAggregate {
    pub left: Box<dyn AggregateFunc>,
    pub left_field: Option<String>,
    pub op: AggBinOp,
    pub right: Box<dyn AggregateFunc>,
    pub right_field: Option<String>,
}

Expression-based aggregate that combines two aggregates with an operator

Fields

left: Box<dyn AggregateFunc>

left_field: Option<String>

op: AggBinOp

right: Box<dyn AggregateFunc>

right_field: Option<String>

Implementations

impl ExprAggregate

pub fn new( left: Box<dyn AggregateFunc>, left_field: Option<String>, op: AggBinOp, right: Box<dyn AggregateFunc>, right_field: Option<String>, ) -> Self

Trait Implementations

impl AggregateFunc for ExprAggregate

fn name(&self) -> &'static str

Returns the name of this aggregation function (e.g., “sum”, “avg”).

fn apply(&self, events: &[Event], _field: Option<&str>) -> Value

Apply the aggregation to a slice of events.

fn apply_refs(&self, events: &[&Event], _field: Option<&str>) -> Value

Apply aggregation to event references (internal helper)

fn apply_shared(&self, events: &[SharedEvent], field: Option<&str>) -> Value

Apply aggregation to shared events (avoids cloning in hot paths).

fn apply_columnar( &self, buffer: &mut ColumnarBuffer, field: Option<&str>, ) -> Value

Apply aggregation to columnar buffer (SIMD-optimized for numeric aggregations).

impl Debug for ExprAggregate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.