github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-07-17 16:21:31 +00:00
Code Issues Projects Releases Wiki Activity

Add support for json-formatted output

Browse Source
This commit is contained in:
Henri DF 2016-04-21 16:30:51 -07:00
parent f837dfc78c
commit 45f8096dd3
4 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
digwatch.yaml
View File

@ -1,4 +1,5 @@
rules_file: /etc/digwatch_rules.conf rules_file: /etc/digwatch_rules.conf
json_output: true
syslog_output: syslog_output:
enabled: false enabled: false

1
userspace/digwatch/configuration.cpp
View File

@ -19,6 +19,7 @@ void digwatch_configuration::init(string conf_filename)
m_config = new yaml_configuration(m_config_file); m_config = new yaml_configuration(m_config_file);
m_rules_filename = m_config->get_scalar<string>("rules_file", "/etc/digwatch_rules.conf"); m_rules_filename = m_config->get_scalar<string>("rules_file", "/etc/digwatch_rules.conf");
m_json_output = m_config->get_scalar<bool>("json_output", false);
output_config file_output; output_config file_output;
file_output.name = "file"; file_output.name = "file";

1
userspace/digwatch/configuration.h
View File

@ -95,6 +95,7 @@ class digwatch_configuration
void init(std::string conf_filename); void init(std::string conf_filename);
void init(); void init();
std::string m_rules_filename; std::string m_rules_filename;
bool m_json_output;
std::vector<output_config> m_outputs; std::vector<output_config> m_outputs;
private: private:
yaml_configuration* m_config; yaml_configuration* m_config;

14
userspace/digwatch/digwatch.cpp
View File

@ -200,7 +200,7 @@ int digwatch_init(int argc, char **argv)
sinsp* inspector = NULL; sinsp* inspector = NULL;
digwatch_rules* rules = NULL; digwatch_rules* rules = NULL;
int op; int op;
sinsp_evt::param_fmt event_buffer_format = sinsp_evt::PF_NORMAL; sinsp_evt::param_fmt event_buffer_format;
int long_index = 0; int long_index = 0;
string lua_main_filename; string lua_main_filename;
string output_name = "stdout"; string output_name = "stdout";
@ -259,8 +259,6 @@ int digwatch_init(int argc, char **argv)
} }
inspector->set_buffer_format(event_buffer_format);
ifstream* conf_stream; ifstream* conf_stream;
if (conf_filename.size()) if (conf_filename.size())
@ -359,6 +357,16 @@ int digwatch_init(int argc, char **argv)
inspector->set_hostname_and_port_resolution_mode(false); inspector->set_hostname_and_port_resolution_mode(false);
if (config.m_json_output)
{
event_buffer_format = sinsp_evt::PF_JSON;
}
else
{
event_buffer_format = sinsp_evt::PF_NORMAL;
}
inspector->set_buffer_format(event_buffer_format);
for(std::vector<output_config>::iterator it = config.m_outputs.begin(); it != config.m_outputs.end(); ++it) for(std::vector<output_config>::iterator it = config.m_outputs.begin(); it != config.m_outputs.end(); ++it)
{ {
add_output(ls, *it); add_output(ls, *it);