github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-03 23:55:06 +00:00
Code Issues Projects Releases Wiki Activity

General-purpose list_fields(), via factories

Browse Source 
Take advantage of the changes in
https://github.com/falcosecurity/libs/pull/75 to have a
general-purpose way to list fields for a given event source.

in the engine, list_fields() now takes a source, iterates over filter
factories, and calls get_fields() for each factory, printing the results.

list_source_fields now calls the engine regardless of source.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
This commit is contained in:
Mark Stemm
2021-08-25 16:48:02 -07:00
committed by poiana
parent 3202921355
commit 943a37fcf7
5 changed files with 96 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
userspace/engine/falco_engine.h
View File

@@ -57,7 +57,8 @@ public:
static uint32_t engine_version();
// Print to stdout (using printf) a description of each field supported by this engine.
void list_fields(bool names_only=false);
// If source is non-empty, only fields for the provided source are printed.
void list_fields(std::string &source, bool names_only);
//
// Load rules either directly or from a filename.