From 67cde2980d3733831e882158ccf21e1d3cde9df5 Mon Sep 17 00:00:00 2001 From: Michael Ducy Date: Tue, 27 Nov 2018 19:44:01 -0600 Subject: [PATCH] Add k8s.ns.name to output when -k flag passed (#472) --- userspace/falco/falco.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/userspace/falco/falco.cpp b/userspace/falco/falco.cpp index b9e26a5e..8140a736 100644 --- a/userspace/falco/falco.cpp +++ b/userspace/falco/falco.cpp @@ -559,7 +559,7 @@ int falco_init(int argc, char **argv) } else if(string(optarg) == "k" || string(optarg) == "kubernetes") { - output_format = "k8s.pod=%k8s.pod.name container=%container.id"; + output_format = "k8s.ns=%k8s.ns.name k8s.pod=%k8s.pod.name container=%container.id"; replace_container_info = true; } else if(string(optarg) == "m" || string(optarg) == "mesos")