github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-15 04:43:52 +00:00
Code Issues Projects Releases Wiki Activity

update(userspace/engine): add support for hostname

Browse Source 
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
This commit is contained in:
Leonardo Grasso 2022-08-23 16:46:36 +02:00 committed by poiana
parent f7b662f936
commit 34ad5c43fb
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
userspace/engine/formats.cpp
View File

@ -34,7 +34,8 @@ falco_formats::~falco_formats()
}
string falco_formats::format_event(gen_event *evt, const std::string &rule, const std::string &source,
const std::string &level, const std::string &format, std::set<std::string> &tags)
const std::string &level, const std::string &format, std::set<std::string> &tags,
const std::string &hostname)
{
string line;
@ -83,6 +84,7 @@ string falco_formats::format_event(gen_event *evt, const std::string &rule, cons
event["rule"] = rule;
event["priority"] = level;
event["source"] = source;
event["hostname"] = hostname;
if(m_json_include_output_property)
{

3
userspace/engine/formats.h
View File

@ -30,7 +30,8 @@ public:
virtual ~falco_formats();
std::string format_event(gen_event *evt, const std::string &rule, const std::string &source,
const std::string &level, const std::string &format, std::set<std::string> &tags);
const std::string &level, const std::string &format, std::set<std::string> &tags,
const std::string &hostname);
map<string, string> get_field_values(gen_event *evt, const std::string &source,
const std::string &format);