Versions in this module Expand all Collapse all v0 v0.2.0 Jul 9, 2026 v0.1.1 Jul 9, 2026 v0.1.0 Jul 9, 2026 Changes in this version + const MaxInputSize + var ErrEmptyQuery = errors.New("empty query") + var ErrInputTooLarge = errors.New("input exceeds maximum size") + var MaxParseTime = 5 * time.Second + func ExprString(e Expr) string + func GetEventTypeFromConditions(r *ParseResult) string + func HasComplexWhereConditions(r *ParseResult) bool + func HasUnmappedComputedFields(r *ParseResult) bool + func IsStatisticalQuery(r *ParseResult) bool + func MaxSpanDuration(span string) (int64, bool) + func NormalizeQuery(query string) string + type BadExpr struct + Near string + type Binary struct + L Expr + Op string + R Expr + type Call struct + Args []Expr + Insensitive bool + Name string + type Condition struct + Alternatives []string + CaseInsensitive bool + CoFields []string + EventCategory string + Field string + FromMissing bool + FromUntil bool + Function string + IsOptional bool + Lineage string + LogicalOp string + Negated bool + Operator string + PipeStage int + SequenceStep int + Value string + ValueIsField bool + func DeduplicateConditions(conds []Condition) []Condition + type EventQuery struct + Bare bool + Category string + CategoryAny bool + Where Expr + type ExpectedCondition struct + Alternatives []string + Field string + Negated bool + Operator string + SequenceStep int + Value string + type Expr interface + func ParseExpression(input string) (Expr, error) + type Field struct + Optional bool + Path []PathSeg + func (f *Field) Name() string + type FieldProvenance string + const ProvenanceAmbiguous + const ProvenanceJoinKey + const ProvenanceJoined + const ProvenanceMain + const ProvenanceUnknown + func ClassifyFieldProvenance(r *ParseResult, field string) FieldProvenance + type FieldUsage struct + InPipes bool + InUntil bool + IsJoinKey bool + Steps []int + func ClassifyFieldUsage(r *ParseResult, field string) FieldUsage + type GeneratedCase struct + Expected []ExpectedCondition + ID int64 + Query string + Seed int64 + type InExpr struct + Insensitive bool + List []Expr + Negated bool + X Expr + type Lineage struct + Kind string + Sub *EventQuery + type Literal struct + Bool bool + Kind LiteralKind + Raw bool + Text string + Value string + type LiteralKind int + const LitBool + const LitNull + const LitNumber + const LitString + type Not struct + X Expr + type Paren struct + X Expr + type ParseResult struct + Commands []string + Conditions []Condition + Errors []string + EventCategories []string + Fields []string + JoinKeys []string + Pipes []PipeInfo + Sequence *SequenceInfo + func ExtractConditions(query string) *ParseResult + func (r *ParseResult) GroupByFields() []string + type PathSeg struct + Index int + IsIndex bool + Name string + type PatternExpr struct + Insensitive bool + Kind PatternKind + Parenthesized bool + Patterns []Expr + X Expr + type PatternKind string + const PatternLike + const PatternRegex + const PatternSeq + type Pipe struct + Args []Expr + Name string + type PipeInfo struct + Args []string + Name string + type Query struct + Body QueryBody + Pipes []*Pipe + func Parse(query string) (*Query, error) + func (q *Query) String() string + type QueryBody interface + type Sequence struct + By []Expr + Kind SequenceKind + MaxSpan string + Steps []*SequenceStep + Until *SequenceStep + WithByOrder bool + type SequenceInfo struct + ByFields []string + Kind string + MaxSpan string + MaxSpanMS int64 + Steps []SequenceStepInfo + Until *SequenceStepInfo + type SequenceKind string + const KindJoin + const KindSample + const KindSequence + type SequenceStep struct + By []Expr + Missing bool + Query *EventQuery + Runs int + WithKey string + type SequenceStepInfo struct + ByFields []string + ConditionCount int + EventCategory string + Missing bool + Runs int + Subquery *ParseResult + type Token struct + Col int + Line int + Pos int + Raw bool + SingleQuoted bool + Text string + Tilde bool + TripleQuoted bool + Type TokenType + Value string + type TokenType int + const TokenAnd + const TokenAny + const TokenAssign + const TokenBacktickIdent + const TokenBy + const TokenColon + const TokenComma + const TokenDot + const TokenEOF + const TokenEQ + const TokenError + const TokenFalse + const TokenGT + const TokenGTE + const TokenIdent + const TokenIn + const TokenInTilde + const TokenJoin + const TokenLBrack + const TokenLParen + const TokenLT + const TokenLTE + const TokenLike + const TokenLikeTilde + const TokenMaxspan + const TokenMinus + const TokenMissing + const TokenNEQ + const TokenNot + const TokenNull + const TokenNumber + const TokenOf + const TokenOptional + const TokenOr + const TokenPercent + const TokenPipe + const TokenPlus + const TokenRBrack + const TokenRParen + const TokenRegex + const TokenRegexTilde + const TokenSample + const TokenSequence + const TokenSlash + const TokenStar + const TokenString + const TokenTrue + const TokenUntil + const TokenWhere + const TokenWith + func (t TokenType) String() string + type Unary struct + Op string + X Expr