"""The event filter."""

from plaso.filters import expression_parser


class EventObjectFilter:
  """Event filter."""

  def __init__(self):
    """Initializes an event filter."""
    super().__init__()
    self._event_filter = None
    self._filter_expression = None

  def CompileFilter(self, filter_expression):
    """Compiles the filter expression.

    The filter expression contains an object filter expression.

    Args:
      filter_expression (str): filter expression.

    Raises:
      ParseError: if the filter expression cannot be parsed.
    """
    parser = expression_parser.EventFilterExpressionParser()
    expression = parser.Parse(filter_expression)

    self._event_filter = expression.Compile()
    self._filter_expression = filter_expression

  def Match(self, event, event_data, event_data_stream, event_tag):
    """Determines if an event matches the filter.

    Args:
      event (EventObject): event.
      event_data (EventData): event data.
      event_data_stream (EventDataStream): event data stream.
      event_tag (EventTag): event tag.

    Returns:
      bool: True if the event matches the filter, False otherwise.
    """
    if not self._event_filter:
      return True

    return self._event_filter.Matches(
        event, event_data, event_data_stream, event_tag)
