Expand description
query functions to match points
Structs
- A set of predicates and options used to select packets
Enums
- A list of all supported query predicates
Statics
- The empty_query
Functions
- Create a new Query specifically for a hash. Sets the right mode and ‘i’ count. See runtime::lk_get_hashes if you don’t care to watch the db.
- Clear a Query for reuse
- Compile a Query into a function which tests packets to deteremine if they match - WARN - slow and subject to change.
- Add multiple ABE encoded statements to a Query
- Get the string representation of a Query
- Add a single statement to a Query, potentially skipping an encode step. i.e. fast path for adding a single statement - lk_query_parse(q,“{field}:{op}:{lk_encode(bytes)}”)