Mark Stemm 04f3cc503c Add ability to check if field is defined ...

Add a function is_defined_field(source, fldname) that returns whether
a field with name fldname exists for the given event source. This uses
the filter factory to create a filtercheck, and returns true if an
object was created.

This prevents having to push down the entire set of defined fields
before calling load_rules().

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2021-10-12 17:59:38 +02:00

..

engine

Add ability to check if field is defined

2021-10-12 17:59:38 +02:00

falco

Use the new falco engine interface w/ generic events

2021-10-12 17:59:38 +02:00