mirror of
https://github.com/falcosecurity/falco.git
synced 2025-09-13 05:22:34 +00:00
update(userspace/falco): add "internal" source to outputs and proto
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
This commit is contained in:
@@ -196,7 +196,7 @@ void falco_outputs::handle_msg(uint64_t ts,
|
|||||||
falco_outputs::ctrl_msg cmsg = {};
|
falco_outputs::ctrl_msg cmsg = {};
|
||||||
cmsg.ts = ts;
|
cmsg.ts = ts;
|
||||||
cmsg.priority = priority;
|
cmsg.priority = priority;
|
||||||
cmsg.source = "";
|
cmsg.source = "internal";
|
||||||
cmsg.rule = rule;
|
cmsg.rule = rule;
|
||||||
cmsg.fields = output_fields;
|
cmsg.fields = output_fields;
|
||||||
|
|
||||||
|
@@ -57,4 +57,7 @@ enum source {
|
|||||||
k8s_audit = 1;
|
k8s_audit = 1;
|
||||||
K8s_audit = 1;
|
K8s_audit = 1;
|
||||||
K8S_audit = 1;
|
K8S_audit = 1;
|
||||||
|
INTERNAL = 2;
|
||||||
|
internal = 2;
|
||||||
|
Internal = 2;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user