mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-22 20:29:39 +00:00
2a3ca21779
* Add option to exclude output property in json fmt New falco.yaml option json_include_output_property controls where the formatted string "output" is included in the json object when json output is enabled. By default the string is included. * Add tests for new json output option New test sets json_include_output_property to false and then verifies that the json output does *not* contain the surrounding text "Warning an open...".
53 lines
1.3 KiB
C++
53 lines
1.3 KiB
C++
/*
|
|
Copyright (C) 2016 Draios inc.
|
|
|
|
This file is part of falco.
|
|
|
|
falco is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License version 2 as
|
|
published by the Free Software Foundation.
|
|
|
|
falco is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with falco. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "sinsp.h"
|
|
|
|
extern "C" {
|
|
#include "lua.h"
|
|
#include "lualib.h"
|
|
#include "lauxlib.h"
|
|
}
|
|
|
|
class sinsp_evt_formatter;
|
|
|
|
class falco_formats
|
|
{
|
|
public:
|
|
static void init(sinsp* inspector, lua_State *ls, bool json_output, bool json_include_output_property);
|
|
|
|
// formatter = falco.formatter(format_string)
|
|
static int formatter(lua_State *ls);
|
|
|
|
// falco.free_formatter(formatter)
|
|
static int free_formatter(lua_State *ls);
|
|
|
|
// falco.free_formatters()
|
|
static int free_formatters(lua_State *ls);
|
|
|
|
// formatted_string = falco.format_event(evt, formatter)
|
|
static int format_event(lua_State *ls);
|
|
|
|
static sinsp* s_inspector;
|
|
static sinsp_evt_formatter_cache *s_formatters;
|
|
static bool s_json_output;
|
|
static bool s_json_include_output_property;
|
|
};
|