github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-12 21:16:33 +00:00
Code Issues Projects Releases Wiki Activity

Plugins support (outputs)

Browse Source 
The generic events support already handled most of this, with a
dedicated formatter factory for plugin sources. Just one missing
header include and change the logic slightly for json parsing.

Co-authored-by: Leonardo Grasso <me@leonardograsso.com>
Co-authored-by: Loris Degioanni <loris@sysdig.com>
Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
This commit is contained in:
Mark Stemm
2021-10-15 16:47:14 -07:00
committed by poiana
parent e7d41f8166
commit 98599d5e25
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
userspace/engine/formats.h
View File

@@ -17,6 +17,7 @@ limitations under the License.
#pragma once #pragma once
#include <string> #include <string>
#include <map>
extern "C" extern "C"
{ {

2
userspace/falco/falco_outputs.cpp
View File

@@ -155,7 +155,7 @@ void falco_outputs::handle_event(gen_event *evt, string &rule, string &source,
cmsg.rule = rule; cmsg.rule = rule;
string sformat; string sformat;
if(source == "syscall") if(source != "k8s_audit")
{ {
if(m_time_format_iso_8601) if(m_time_format_iso_8601)
{ {