Struct AuditExport 

pub struct AuditExport {
    pub events: Vec<AuditEvent>,
    pub merkle_root: Option<String>,
    pub exported_at: DateTime<Utc>,
    pub verified: bool,
}

Audit export for compliance reporting

Fields

events: Vec<AuditEvent>

merkle_root: Option<String>

exported_at: DateTime<Utc>

verified: bool

Implementations

impl AuditExport

pub fn to_ocsf(&self) -> Vec<Value>

Export to OCSF v1.7.0 format (Open Cybersecurity Schema Framework) Uses Detection Finding class (class_uid: 2004) for AI agent events See: https://schema.ocsf.io/1.7.0/classes/detection_finding

pub fn to_splunk_hec(&self, index: &str, source: &str) -> Vec<Value>

Export to Splunk HEC format (HTTP Event Collector) Uses epoch timestamps and proper metadata placement See: https://docs.splunk.com/Documentation/Splunk/latest/Data/FormateventsforHTTPEventCollector

pub fn to_datadog(&self, service: &str, env: &str) -> Vec<Value>

Export to Datadog logs format Uses reserved attributes for proper log correlation See: https://docs.datadoghq.com/logs/log_configuration/attributes_naming_convention

pub fn to_jsonl(&self) -> String

Export all events to JSON Lines format (one JSON per line) Compatible with most log ingestion systems

Trait Implementations

impl Clone for AuditExport

fn clone(&self) -> AuditExport

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditExport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditExport

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditExport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.