diff --git a/userspace/falco/falco_outputs.cpp b/userspace/falco/falco_outputs.cpp index 308c94d6..6aa6ea57 100644 --- a/userspace/falco/falco_outputs.cpp +++ b/userspace/falco/falco_outputs.cpp @@ -196,7 +196,7 @@ void falco_outputs::handle_msg(uint64_t ts, falco_outputs::ctrl_msg cmsg = {}; cmsg.ts = ts; cmsg.priority = priority; - cmsg.source = ""; + cmsg.source = "internal"; cmsg.rule = rule; cmsg.fields = output_fields; diff --git a/userspace/falco/schema.proto b/userspace/falco/schema.proto index b57ebff8..18b5ef3f 100644 --- a/userspace/falco/schema.proto +++ b/userspace/falco/schema.proto @@ -57,4 +57,7 @@ enum source { k8s_audit = 1; K8s_audit = 1; K8S_audit = 1; + INTERNAL = 2; + internal = 2; + Internal = 2; }