Struct Event 

pub struct Event {
    pub record_id: u64,
    pub event_id: u32,
    pub time_created: DateTime<Utc>,
    pub provider: String,
    pub channel: String,
    pub xml: String,
    pub data: HashMap<String, String>,
}

A parsed Windows event.

xml is the raw RenderedXml payload from EvtRender; every other field is derived from it. Keep xml around when the caller wants to inspect UserData / raw payload fields we did not lift into data.

Fields

record_id: u64

event_id: u32

time_created: DateTime<Utc>

provider: String

channel: String

xml: String

data: HashMap<String, String>

Flattened <EventData><Data Name="…">value</Data></EventData> map. Nameless <Data> elements land under keys Data_0, Data_1, ….

Trait Implementations

impl Clone for Event

fn clone(&self) -> Event

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Event

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.