MIT license

24KB
520 lines

AFRS

Another f****** rule syntax, simple quick pattern matching on JSON objects (more data types to come).

Rule Synax

Name, the name of the rule.
Variables, one or more variables that matches data in a field. Each variable object needs to have a name field and a field field, the name field needs to match a variable name in the conditional string. The field field has to match a fieldname in the JSON object, follows the gjson sytnax. Lastly the type field has to match one of the variable kinds in the table below.
Conditional, a string comprised of the variable names (For example A and B | C).

Type	Additional Rule Field(s)	Description
Contains	`contains`	Variable type looks to see if the value at the location specified by `field` contains the value provided in the `contains` field.
Exact	`exact`	Variable type looks to see if the value at the location specified by `field` exactly matches the value provided in the `exact` field.
Regex	`regex`	The `regex` field is read in and deserialized as a (`Regex`)https://docs.rs/regex/1.5.4/regex/struct.Regex.html pattern, this is then matched against the value at the location specified by `field`.
Compare	`ordering`,`value`	The `ordering` field is read in and deserialized as a (`Ordering`)https://doc.rust-lang.org/std/cmp/enum.Ordering.html, `value` is read as a double. `value` is compared to the value pulled at `field`.

~9.5MB
~126K SLoC