Eval evaluates expr against a map that contains the field values.

MultiValuer returns a Valuer that iterates over multiple Valuer instances to find a match.

NewParser builds a new parser instance from the expression string.

NewParserWithConfig builds a new parser instance with filters config.

ScanString reads a quoted string from a rune reader.

Walk traverses a node hierarchy in depth-first order.

WalkFunc traverses a node hierarchy in depth-first order.

and.

AS.

192.156.300.12.

$evt1.file.name.

BY.

,.

contains.

123.3.

.

13h.

endswith.

=.

false.

ps.name.

fuzzy.

fuzzynorm.

>.

>=.

icontains.

iendswith.

~=.

ifuzzy.

ifuzzynorm.

iin.

imatches.

in.

123.

192.168.1.23.

istartswith.

(.

<.

<=.

matches.

MAXSPAN.

!=.

not.

or.

|.

).

SEQUENCE.

startswith.

'cmd.exe'.

true.

ErrArgumentTypeMismatch signals an invalid argument type.

ErrFunctionSignature is thrown when the function signature is not satisfied.

ErrInvalidDuration is returned when parsing a malformed duration.

ErrUndefinedFunction is thrown when an unknown function is supplied.

BinaryExpr represents an operation between two expressions.

BoolLiteral represents the logical true/false literal.

DecimalLiteral represents an floating point number literal.

FieldLiteral represents a field literal.

Function represents a function call.

FunctionValuer implements the CallValuer interface and delegates the evaluation of function calls to the corresponding functions.

IntegerLiteral represents a signed number literal.

IPLiteral represents an IP literal.

ListLiteral represents a list of tag key literals.

NotExpr represents an unary not expression.

ParenExpr represents a parenthesized expression.

ParseError represents an error that occurred during parsing.

Parser builds the binary expression tree from the filter string.

Sequence is a collection of two or more sequence expressions.

SequenceExpr represents a single binary expression within the sequence.

StringLiteral represents a string literal.

UnsignedLiteral represents an unsigned number literal.

ValuerEval will evaluate an expression using the Valuer.

CallValuer implements the Call method for evaluating function calls.

Expr represents an expression that can be evaluated to a value.

FunctionDef is the interface that all function definitions have to satisfy.

Node represents a node in the abstract syntax tree.

Valuer is the interface that wraps the Value() method.

Visitor can be called by Walk to traverse an AST hierarchy.

MapValuer is a valuer that substitutes values for the mapped interface.