diff --git a/userspace/falco/app/actions/configure_interesting_sets.cpp b/userspace/falco/app/actions/configure_interesting_sets.cpp index 6d661b9c..90fa5db7 100644 --- a/userspace/falco/app/actions/configure_interesting_sets.cpp +++ b/userspace/falco/app/actions/configure_interesting_sets.cpp @@ -53,7 +53,7 @@ static void check_for_rules_unsupported_events(falco::app::state& s, const libsi } /* Get the names of the events (syscall and non syscall events) that were not activated and print them. */ - auto names = libsinsp::events::sc_set_to_names(unsupported_sc_set); + auto names = libsinsp::events::sc_set_to_event_names(unsupported_sc_set); std::cerr << "Loaded rules match syscalls that are not activated (e.g. were removed via config settings such as no -A flag or negative base_syscalls elements) or unsupported with current configuration: warning (unsupported-evttype): " + concat_set_in_order(names) << std::endl; std::cerr << "If syscalls in rules include high volume I/O syscalls (-> activate via `-A` flag), else syscalls may have been removed via base_syscalls option or might be associated with syscalls undefined on your architecture (https://marcin.juszkiewicz.com.pl/download/tables/syscalls.html)" << std::endl; } @@ -63,7 +63,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set

user_positive_names = {}; std::unordered_set user_negative_names = {}; extract_base_syscalls_names(s.config->m_base_syscalls_custom_set, user_positive_names, user_negative_names); - auto user_positive_sc_set = libsinsp::events::names_to_sc_set(user_positive_names); - auto user_negative_sc_set = libsinsp::events::names_to_sc_set(user_negative_names); + auto user_positive_sc_set = libsinsp::events::event_names_to_sc_set(user_positive_names); + auto user_negative_sc_set = libsinsp::events::event_names_to_sc_set(user_negative_names); if (!user_positive_sc_set.empty()) { @@ -96,7 +96,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set

activate via `-A` flag): " + concat_set_in_order(erased_sc_set_names) + "\n"); @@ -188,7 +188,7 @@ static void select_event_set(falco::app::state& s, const libsinsp::events::set