Mark Stemm aed1897cf1 Add individual event fields to json output ...

When json output is set, add a sub-object called output_fields to the
json output that contains the individual templated fields from the
output string. Makes it easier to parse those fields.

This fixes https://github.com/draios/falco/issues/261.

2017-10-06 13:16:41 -07:00

..

lua

Add ability to append to rules/macros

2017-09-22 17:08:00 -07:00

CMakeLists.txt

Add rate-limiting for notifications

2016-12-22 12:55:36 -08:00

config_falco_engine.h.in

Fully specify FALCO_SHARE_DIR.

2016-12-22 12:55:36 -08:00

falco_common.cpp

engine: throw an exception if lua cannot be opened

2017-02-22 14:16:16 +01:00

falco_common.h

Add license comments to all source code.

2016-10-24 15:56:45 -07:00

falco_engine.cpp

Address feedback from PR

2017-02-10 11:54:30 -08:00

falco_engine.h

Address feedback from PR

2017-02-10 11:54:30 -08:00

formats.cpp

Add individual event fields to json output

2017-10-06 13:16:41 -07:00

formats.h

Use sysdig's formatter cache.

2017-02-27 12:15:49 -08:00

lpeg.h

Move falco engine to its own library.

2016-10-24 15:56:45 -07:00

lyaml.h

Move falco engine to its own library.

2016-10-24 15:56:45 -07:00

rules.cpp

Return lua errors not falco_exceptions

2017-02-27 11:57:36 -08:00

rules.h

Add support for tagging rules.

2017-02-08 11:08:36 -08:00

token_bucket.cpp

Add ability to claim multiple tokens.

2017-05-02 11:46:20 -07:00

token_bucket.h

Add ability to claim multiple tokens.

2017-05-02 11:46:20 -07:00