remove unneccesary pub

src/detections/detection.rs

@@ -38,7 +38,12 @@ impl Detection {
                     &common.detection(&event.system, &event_data);
                     //&common.detection(&event.system, &event_data);
                     if channel == "Security" {
-                        &security.detection(event_id, &event.system, &event.user_data, event_data);
+                        &security.detection(
+                            event_id,
+                            &event.system,
+                            &event.user_data.as_ref(),
+                            event_data,
+                        );
                     } else if channel == "System" {
                         &system.detection(event_id, &event.system, event_data);
                     } else if channel == "Application" {

src/detections/security.rs

@@ -66,7 +66,7 @@ impl Security {
         &mut self,
         event_id: String,
         _system: &event::System,
-        user_data: &Option<event::UserData>,
+        user_data: &Option<&event::UserData>,
         event_data: HashMap<String, String>,
     ) {
         self.process_craeted(&event_id, &event_data);
@@ -287,22 +287,16 @@ impl Security {
         self.passspray_2_user = HashMap::new();
     }
 
-    fn audit_log_cleared(
-        &mut self,
-        event_id: &String,
-        user_data: &Option<event::UserData>
-    ) {
+    fn audit_log_cleared(&mut self, event_id: &String, user_data: &Option<&event::UserData>) {
         if event_id != "1102" {
             return;
         }
 
         println!("Audit Log Clear");
         println!("The Audit log was cleared.");
-        let username = user_data.as_ref().and_then(|u| {
-            u.log_file_cleared
-                .as_ref()
-                .and_then(|l| l.subject_user_name.as_ref())
-        });
-        println!("Security ID: {}", username.unwrap_or(&"".to_string()));
+        user_data.and_then(|u| u.log_file_cleared.as_ref());
+
+        let username = user_data.and_then(|u| u.log_file_cleared.and_then(|l| l.subject_user_name));
+        println!("Security ID: {}", username.unwrap_or("".to_string()));
     }
 }

src/models/event.rs

@@ -39,7 +39,7 @@ pub struct System {
     #[serde(rename = "EventID")]
     pub event_id: String,
     #[serde(rename = "Version")]
-    pub version: Option<String>,
+    version: Option<String>,
     #[serde(rename = "Level")]
     level: String,
     #[serde(rename = "Task")]