github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-13 03:46:14 +00:00
Code Issues Projects Releases Wiki Activity
generalize-indexable-ruleset-polymorphic
falco/userspace/engine
History
Mark Stemm c2011ac9c6 Modify evttype_index_ruleset to derive from indexable_ruleset 
Modify evttype_index_ruleset to derive from indexable_ruleset instead
of having its own implementation of segregating filters by ruleset
id/event type.

An evttype_index_ruleset::wrapper contains a falco rule and filter,
and run_wrappers() evaluate the filter as before, without the
segregation by ruleset id/event type.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>
2024-06-18 10:26:49 -07:00
..
CMakeLists.txt Actually add indexable_ruleset to build 2024-06-14 11:39:32 -07:00
evttype_index_ruleset.cpp Modify evttype_index_ruleset to derive from indexable_ruleset 2024-06-18 10:26:49 -07:00
evttype_index_ruleset.h Modify evttype_index_ruleset to derive from indexable_ruleset 2024-06-18 10:26:49 -07:00
falco_common.cpp fix(c++): improve const correctness 2024-02-15 22:16:33 +01:00
falco_common.h new(config): add falco_libs.thread_table_size 2024-03-05 11:36:51 +01:00
falco_engine_version.h chore(userspace): bump engine version and checksum. 2024-06-13 13:40:48 +02:00
falco_engine.cpp new(metrics): add rules_counters_enabled option 2024-05-17 14:54:58 +02:00
falco_engine.h new(metrics): add rules_counters_enabled option 2024-05-17 14:54:58 +02:00
falco_load_result.cpp update(userspace/engine): propagate compiler warnings 2024-05-08 20:23:55 +02:00
falco_load_result.h update(userspace/engine): propagate compiler warnings 2024-05-08 20:23:55 +02:00
falco_rule.h refactor: remove refs to gen_event class family 2024-02-06 10:25:53 +01:00
falco_source.h update(userspace/engine): support tranformers in exception fields 2024-05-08 20:23:55 +02:00
falco_utils.cpp clenaup: add sanitize_metric_name helper 2024-05-17 14:54:58 +02:00
falco_utils.h clenaup: add sanitize_metric_name helper 2024-05-17 14:54:58 +02:00
filter_details_resolver.cpp update(userspace/engine): support comparins with right-hand fields 2024-05-08 20:23:55 +02:00
filter_details_resolver.h update(userspace/engine): support comparins with right-hand fields 2024-05-08 20:23:55 +02:00
filter_macro_resolver.cpp refactor(userspace/libsinsp): support new filter ast structure in falco engine 2024-05-08 20:23:55 +02:00
filter_macro_resolver.h refactor(userspace/libsinsp): support new filter ast structure in falco engine 2024-05-08 20:23:55 +02:00
filter_ruleset.cpp fix(c++): improve const correctness 2024-02-15 22:16:33 +01:00
filter_ruleset.h new(falco): implement rule selection configuration in falco.yaml 2024-05-14 12:47:46 +02:00
filter_warning_resolver.cpp refactor(userspace/libsinsp): support new filter ast structure in falco engine 2024-05-08 20:23:55 +02:00
filter_warning_resolver.h refactor(userspace/libsinsp): support new filter ast structure in falco engine 2024-05-08 20:23:55 +02:00
formats.cpp fix(c++): improve const correctness 2024-02-15 22:16:33 +01:00
formats.h fix(c++): improve const correctness 2024-02-15 22:16:33 +01:00
indexable_ruleset.cpp Add an indexable ruleset that can split filters by ruleset/evttype 2024-06-14 11:39:32 -07:00
indexable_ruleset.h Add an indexable ruleset that can split filters by ruleset/evttype 2024-06-14 11:39:32 -07:00
indexed_vector.h update: add SPDX license identifier 2023-09-21 13:21:47 +02:00
logger.cpp refactor(userspace): move falco logger under falco engine 2024-05-23 09:29:23 +02:00
logger.h refactor(userspace): move falco logger under falco engine 2024-05-23 09:29:23 +02:00
OWNERS
rule_loader_collector.cpp update(userspace/engine): support tranformers in exception fields 2024-05-08 20:23:55 +02:00
rule_loader_collector.h new(engine): add selective overrides 2023-12-22 21:49:21 +01:00
rule_loader_compile_output.h Provide the entire compile output to ruleset vs individual add()s 2024-01-30 20:24:33 +01:00
rule_loader_compiler.cpp update(engine): allow using -p to pass a format to plugin events 2024-06-11 09:19:39 +02:00
rule_loader_compiler.h refactor(userspace/engine): reduce allocations during rules loading 2024-02-09 14:50:05 +01:00
rule_loader_reader.cpp fix(userspace/engine): make sure exception fields are not optional in replace mode 2024-05-17 14:38:57 +02:00
rule_loader_reader.h refactor(userspace): remove libs relative imports 2024-01-31 11:51:37 +01:00
rule_loader.cpp refactor(engine): fix variable / function shadowing 2024-02-29 16:20:34 +01:00
rule_loader.h refactor: smart pointer usage 2024-05-06 11:10:44 +02:00
rule_loading_messages.h new(engine): raise warning instead of error on invalid macro/list name 2024-04-17 11:27:52 +02:00
stats_manager.cpp refactor: smart pointer usage 2024-05-06 11:10:44 +02:00
stats_manager.h cleanup: add getter functions to stats_manager 2024-05-17 14:54:58 +02:00