diff --git a/userspace/falco/falco_output.proto b/userspace/falco/falco_output.proto index 09b74902..3464ec43 100644 --- a/userspace/falco/falco_output.proto +++ b/userspace/falco/falco_output.proto @@ -2,32 +2,56 @@ syntax = "proto3"; import "google/protobuf/timestamp.proto"; -service falco_output_service { - rpc subscribe(falco_output_request) returns (stream falco_output_response); + +service service { + rpc subscribe(request) returns (stream response); } -message falco_output_request { +message request { string duration = 1; // TODO(leodido, fntlnz): not handled yet but keeping for reference. bool keepalive = 2; } enum priority { + option allow_alias = true; EMERGENCY = 0; + emergency = 0; + Emergency = 0; ALERT = 1; + alert = 1; + Alert = 1; CRITICAL = 2; + critical = 2; + Critical = 2; ERROR = 3; + error = 3; + Error = 3; WARNING = 4; + warning = 4; + Warning = 4; NOTICE = 5; + notice = 5; + Notice = 5; INFORMATIONAL = 6; + informational = 6; + Informational = 6; DEBUG = 7; + debug = 7; + Debug = 7; } enum source { + option allow_alias = true; SYSCALL = 0; + syscall = 0; + Syscall = 0; K8S_AUDIT = 1; + k8s_audit = 1; + K8s_audit = 1; + K8S_audit = 1; } -message falco_output_response { +message response { string id = 1; google.protobuf.Timestamp time = 2; priority priority = 3; @@ -35,4 +59,4 @@ message falco_output_response { string rule = 5; string output = 6; map output_fields = 7; -} \ No newline at end of file +}