Henri DF
c7bafc9a49
Move lua/ to userspace/digwatch
2016-02-21 13:43:08 -08:00
Henri DF
e50dd885c2
Remove cruft from lua/rule_loader.lua
2016-02-21 13:40:34 -08:00
Henri DF
601ad3b620
Merge pull request #2 from draios/digwatch-scaffolding
...
Digwatch initial implementation
2016-02-20 21:27:36 -08:00
Henri DF
3d58c3c9ae
Compile and load digwatch rules!
2016-02-20 21:25:41 -08:00
Henri DF
e1cdd62f2f
Change representation of relational ops in AST
2016-02-20 21:17:00 -08:00
Henri DF
9fef5a7b29
Rework loading of Lua and rules files
2016-02-20 16:21:56 -08:00
Henri DF
9b89116a26
Add config_digwatch.h.in
2016-02-20 13:38:57 -08:00
Henri DF
19cb8cc4f2
sysdig-parser.lua -> compiler.lua
2016-02-20 19:31:20 +00:00
Henri DF
9899680064
Lua parser refactoring
...
Move compiler loading out of libsinsp/lua_parser.cpp and into a new
class in digwatch/rules.cpp.
This way the libsinsp support is strictly about providing a lua API for
scripts to setup filters. Loading the actual parser and rules is logic
that belongs in the app (digwatch in this case, maybe sysdig down the
line) rather than there.
2016-02-19 20:30:23 -08:00
Henri DF
c63657acad
typoes
2016-02-19 16:26:12 -08:00
Henri DF
208930fd55
Simplify error handling in digwatch main
2016-02-19 14:50:51 -08:00
Henri DF
32ad5673c6
Pass filter object into sinsp::set_filter()
2016-02-18 21:09:26 -08:00
Henri DF
4c371e5b1d
Add curl dependency
2016-02-19 01:58:17 +00:00
Henri DF
0a294cd5e5
digwatch scaffolding
...
basic cmake setup and digwatch binary, mostly pulled from sysdig
2016-02-19 01:58:17 +00:00
Henri DF
ab52c42026
remove notes file
2016-02-18 09:37:45 -08:00
Henri DF
b97a1bfc1f
Merge pull request #1 from draios/parser-hacking
...
Digwatch compiler
2016-02-15 16:04:51 -08:00
Henri DF
6e2d8679c4
Macro expansion
2016-02-15 15:19:43 -08:00
Henri DF
b3f7b1d765
Remove whitespace from token values in AST
2016-02-14 21:26:37 -08:00
Henri DF
c21e8207f8
Don't allow '=' in BareStrings
2016-02-14 21:22:20 -08:00
Henri DF
aeba0760db
Scaffold basic line-oriented compiler API
2016-02-14 14:31:10 -08:00
Henri DF
0d10a3f39c
Fix multi-line comments
2016-02-13 15:26:40 -08:00
Henri DF
79cdf31aa7
Expand in relational expressions
...
For example, `a.b in [1, 2]` is expanded to `a.b = 1 or a.b = 2`.
This is done over the AST, not filter text.
2016-02-13 15:23:03 -08:00
Henri DF
3dab9edc9d
add a function to pretty-print ASTs
2016-02-13 15:23:03 -08:00
Henri DF
48685f4f2f
Don't require quoting for non-alphanum characters
...
This commit removes the one remaining (known) difference with the sysdig
c++ parser: relational expression right-hand sides now _only_ need to be
quoted if they contain a paren or a space.
So you can now do things like "fd.name contains (.log and event.dir = <"
without needing to quote "*.log" or "<".
2016-02-13 15:23:03 -08:00
Henri DF
41ee6e49a5
Grammar for filters and macros
2016-02-13 15:23:03 -08:00
Henri DF
4bd8a9d401
Initial README
2016-01-20 14:47:56 -08:00
