| 46 | |
| 47 | #[must_use] |
| 48 | pub fn build(self) -> OcsfEvent { |
| 49 | let activity_name = self.activity_name.as_deref().unwrap_or("Other"); |
| 50 | let mut base = BaseEventData::new( |
| 51 | 0, |
| 52 | "Base Event", |
| 53 | 0, |
| 54 | "Uncategorized", |
| 55 | 99, |
| 56 | activity_name, |
| 57 | self.severity, |
| 58 | self.ctx.metadata(&["container", "host"]), |
| 59 | ); |
| 60 | if !self.unmapped.is_empty() { |
| 61 | base.unmapped = Some(serde_json::Value::Object(self.unmapped)); |
| 62 | } |
| 63 | self.ctx |
| 64 | .apply_common_fields(&mut base, self.status, self.message); |
| 65 | |
| 66 | OcsfEvent::Base(BaseEvent { base }) |
| 67 | } |
| 68 | } |
| 69 | |
| 70 | impl_builder_setters!(BaseEventBuilder); |