diff --git a/userspace/falco/app/actions/configure_interesting_sets.cpp b/userspace/falco/app/actions/configure_interesting_sets.cpp index 6d661b9c..90fa5db7 100644 --- a/userspace/falco/app/actions/configure_interesting_sets.cpp +++ b/userspace/falco/app/actions/configure_interesting_sets.cpp @@ -53,7 +53,7 @@ static void check_for_rules_unsupported_events(falco::app::state& s, const libsi } /* Get the names of the events (syscall and non syscall events) that were not activated and print them. */ - auto names = libsinsp::events::sc_set_to_names(unsupported_sc_set); + auto names = libsinsp::events::sc_set_to_event_names(unsupported_sc_set); std::cerr << "Loaded rules match syscalls that are not activated (e.g. were removed via config settings such as no -A flag or negative base_syscalls elements) or unsupported with current configuration: warning (unsupported-evttype): " + concat_set_in_order(names) << std::endl; std::cerr << "If syscalls in rules include high volume I/O syscalls (-> activate via `-A` flag), else syscalls may have been removed via base_syscalls option or might be associated with syscalls undefined on your architecture (https://marcin.juszkiewicz.com.pl/download/tables/syscalls.html)" << std::endl; } @@ -63,7 +63,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set
user_positive_names = {};
std::unordered_set activate via `-A` flag): "
+ concat_set_in_order(erased_sc_set_names) + "\n");
@@ -188,7 +188,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set