Struct ExtractRequest

pub struct ExtractRequest<'c, 'e, 'r, 't, P: ExtractPlugin> {
    pub context: &'c mut P::ExtractContext,
    pub event: &'e EventInput<'r, P::Event<'r>>,
    pub table_reader: &'t LazyTableReader<'t>,
    pub offset: &'c mut ExtractByteRange,
}

An extraction request

Fields

context: &'c mut P::ExtractContext

A context instance, potentially shared between extractions

event: &'e EventInput<'r, P::Event<'r>>

The event being processed

table_reader: &'t LazyTableReader<'t>

An interface to access tables exposed from Falco core and other plugins

See crate::tables for details.

offset: &'c mut ExtractByteRange

Offset of extracted data in event payload

If set to ExtractByteRange::Requested, and the plugin supports it, replace this with a ExtractByteRange::Found containing the byte range containing the extracted value, within the whole event buffer. In the typical case of a range inside the plugin event data, you can use the ExtractByteRange::in_plugin_data helper.

If the data is computed (not directly coming from any byte range in the event), use UNSPECIFIED_RANGE instead.

Note: range support is optional, and this field can be ignored.

Trait Implementations

impl<'c, 'e, 'r, 't, P: Debug + ExtractPlugin> Debug for ExtractRequest<'c, 'e, 'r, 't, P>

where P::ExtractContext: Debug, P::Event<'r>: Debug,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.