mirror of
https://github.com/falcosecurity/falco.git
synced 2025-09-02 15:15:17 +00:00
update(test): use event source selection in plugins tests
Signed-off-by: Jason Dellaluce <jasondellaluce@gmail.com>
This commit is contained in:
@@ -35,6 +35,7 @@ trace_files: !mux
|
|||||||
stdout_contains: "ct.id"
|
stdout_contains: "ct.id"
|
||||||
|
|
||||||
detect_create_instance:
|
detect_create_instance:
|
||||||
|
enable_source: aws_cloudtrail
|
||||||
detect: True
|
detect: True
|
||||||
detect_level: INFO
|
detect_level: INFO
|
||||||
rules_file:
|
rules_file:
|
||||||
@@ -44,6 +45,7 @@ trace_files: !mux
|
|||||||
conf_file: BUILD_DIR/test/confs/plugins/cloudtrail_json_create_instances.yaml
|
conf_file: BUILD_DIR/test/confs/plugins/cloudtrail_json_create_instances.yaml
|
||||||
|
|
||||||
detect_create_instance_bigevent:
|
detect_create_instance_bigevent:
|
||||||
|
enable_source: aws_cloudtrail
|
||||||
detect: True
|
detect: True
|
||||||
detect_level: INFO
|
detect_level: INFO
|
||||||
rules_file:
|
rules_file:
|
||||||
|
Reference in New Issue
Block a user