falco/userspace/digwatch/rules.h

#pragma once

#include "sinsp.h"
#include "lua_parser.h"

class digwatch_rules
{
 public:
	digwatch_rules(sinsp* inspector, lua_State *ls, string lua_main_filename);
	~digwatch_rules();
	void load_rules(string rules_filename);
	sinsp_filter* get_filter();

 private:
	void load_compiler(string lua_main_filename);

	lua_parser* m_lua_parser;
	lua_State* m_ls;

	string m_lua_load_rule = "load_rule";
	string m_lua_on_done = "on_done";
	string m_lua_on_event = "on_event";
};