Versions in this module Expand all Collapse all v1 v1.4.0 Aug 14, 2022 v1.3.0 Mar 19, 2022 Changes in this version + const GroupNodeKind + var ErrEmptyTraversal = errors.New("Empty traversal") + var ErrInvalidColData = errors.New("Invalid column data spec") + var ErrInvalidConstruct = errors.New("Invalid construct") + var ErrInvalidSpec = errors.New("Invalid traversal spec") + var ErrInvalidWhere = errors.New("Invalid where clause") + var ErrNotAList = errors.New("Value of operand is not a list") + var ErrNotANumber = errors.New("Value of operand is not a number") + var ErrNotARegex = errors.New("Value of operand is not a valid regex") + var ErrUnknownNodeKind = errors.New("Unknown node kind") + type CondRuntime interface + CondEval func(node data.Node, edge data.Edge) (interface{}, error) + type FuncShow interface + type FuncShowInst func(astNode *parser.ASTNode, rtp *eqlRuntimeProvider) (FuncShow, string, string, error) + type FuncWhere func(astNode *parser.ASTNode, rtp *eqlRuntimeProvider, node data.Node, ...) (interface{}, error) + type GetRuntimeProvider struct + func NewGetRuntimeProvider(name string, part string, gm *graph.Manager, ni NodeInfo) *GetRuntimeProvider + func (rtp *GetRuntimeProvider) Runtime(node *parser.ASTNode) parser.Runtime + type LookupRuntimeProvider struct + func NewLookupRuntimeProvider(name string, part string, gm *graph.Manager, ni NodeInfo) *LookupRuntimeProvider + func (rtp *LookupRuntimeProvider) Runtime(node *parser.ASTNode) parser.Runtime + type NodeInfo interface + AttributeDisplayString func(kind string, attr string) string + IsValidAttr func(attr string) bool + SummaryAttributes func(kind string) []string + func NewDefaultNodeInfo(gm *graph.Manager) NodeInfo + type ResultError struct + Detail string + Source string + Type error + func (re *ResultError) Error() string + type RuntimeError struct + Detail string + Line int + Node *parser.ASTNode + Pos int + Source string + Type error + func (re *RuntimeError) Error() string + type SearchHeader struct + ColData []string + ColFormat []string + ColLabels []string + ResPartition string + ResPrimaryKind string + func (sh *SearchHeader) Data() []string + func (sh *SearchHeader) Format() []string + func (sh *SearchHeader) Labels() []string + func (sh *SearchHeader) Partition() string + func (sh *SearchHeader) PrimaryKind() string + type SearchResult struct + Data [][]interface{} + Source [][]string + func (sr *SearchResult) CSV() string + func (sr *SearchResult) Header() *SearchHeader + func (sr *SearchResult) Query() string + func (sr *SearchResult) Row(line int) []interface{} + func (sr *SearchResult) RowCount() int + func (sr *SearchResult) RowSource(line int) []string + func (sr *SearchResult) RowSources() [][]string + func (sr *SearchResult) Rows() [][]interface{} + func (sr *SearchResult) StableSort() + func (sr *SearchResult) String() string + type SearchResultRowComparator struct + Ascening bool + Column int + Data [][]interface{} + Source [][]string + func (c SearchResultRowComparator) Len() int + func (c SearchResultRowComparator) Less(i, j int) bool + func (c SearchResultRowComparator) Swap(i, j int)