Mark Stemm 7c419b6d6b Allow any macro/list/rule to be overridden ...

Allow any list/macro/rule to be overridden by a subsequent file. The
persistent state that lives across invocations of load_rules are the 3
arrays ordered_{list,macro,rule}_names, which have the
lists/macros/rules in the order in which they first appear, and tables
{rules,macros,lists}_by_name, which maps from a name to a yaml object.

With each call to load_rules, the set of loaded rules is reset and the
state of expanded lists, compiled macros, compiled rules, and rule
metadata are recreated from scratch, using the ordered_*_names arrays
and *_by_name tables. That way, any list/macro/rule can be redefined in
a subsequent file with new values.

2016-12-29 13:32:55 -08:00

..

engine

Allow any macro/list/rule to be overridden

2016-12-29 13:32:55 -08:00

falco

Add rate-limiting for notifications

2016-12-22 12:55:36 -08:00