Mark Stemm c2011ac9c6 Modify evttype_index_ruleset to derive from indexable_ruleset ...

Modify evttype_index_ruleset to derive from indexable_ruleset instead
of having its own implementation of segregating filters by ruleset
id/event type.

An evttype_index_ruleset::wrapper contains a falco rule and filter,
and run_wrappers() evaluate the filter as before, without the
segregation by ruleset id/event type.

Signed-off-by: Mark Stemm <mark.stemm@gmail.com>

2024-06-18 10:26:49 -07:00

..

CMakeLists.txt

Actually add indexable_ruleset to build

2024-06-14 11:39:32 -07:00

evttype_index_ruleset.cpp

Modify evttype_index_ruleset to derive from indexable_ruleset

2024-06-18 10:26:49 -07:00

evttype_index_ruleset.h

Modify evttype_index_ruleset to derive from indexable_ruleset

2024-06-18 10:26:49 -07:00

falco_common.cpp

fix(c++): improve const correctness

2024-02-15 22:16:33 +01:00

falco_common.h

new(config): add falco_libs.thread_table_size

2024-03-05 11:36:51 +01:00

falco_engine_version.h

chore(userspace): bump engine version and checksum.

2024-06-13 13:40:48 +02:00

falco_engine.cpp

new(metrics): add rules_counters_enabled option

2024-05-17 14:54:58 +02:00

falco_engine.h

new(metrics): add rules_counters_enabled option

2024-05-17 14:54:58 +02:00

falco_load_result.cpp

update(userspace/engine): propagate compiler warnings

2024-05-08 20:23:55 +02:00

falco_load_result.h

update(userspace/engine): propagate compiler warnings

2024-05-08 20:23:55 +02:00

falco_rule.h

refactor: remove refs to gen_event class family

2024-02-06 10:25:53 +01:00

falco_source.h

update(userspace/engine): support tranformers in exception fields

2024-05-08 20:23:55 +02:00

falco_utils.cpp

clenaup: add sanitize_metric_name helper

2024-05-17 14:54:58 +02:00

falco_utils.h

clenaup: add sanitize_metric_name helper

2024-05-17 14:54:58 +02:00

filter_details_resolver.cpp

update(userspace/engine): support comparins with right-hand fields

2024-05-08 20:23:55 +02:00

filter_details_resolver.h

update(userspace/engine): support comparins with right-hand fields

2024-05-08 20:23:55 +02:00

filter_macro_resolver.cpp

refactor(userspace/libsinsp): support new filter ast structure in falco engine

2024-05-08 20:23:55 +02:00

filter_macro_resolver.h

refactor(userspace/libsinsp): support new filter ast structure in falco engine

2024-05-08 20:23:55 +02:00

filter_ruleset.cpp

fix(c++): improve const correctness

2024-02-15 22:16:33 +01:00

filter_ruleset.h

new(falco): implement rule selection configuration in falco.yaml

2024-05-14 12:47:46 +02:00

filter_warning_resolver.cpp

refactor(userspace/libsinsp): support new filter ast structure in falco engine

2024-05-08 20:23:55 +02:00

filter_warning_resolver.h

refactor(userspace/libsinsp): support new filter ast structure in falco engine

2024-05-08 20:23:55 +02:00

formats.cpp

fix(c++): improve const correctness

2024-02-15 22:16:33 +01:00

formats.h

fix(c++): improve const correctness

2024-02-15 22:16:33 +01:00

indexable_ruleset.cpp

Add an indexable ruleset that can split filters by ruleset/evttype

2024-06-14 11:39:32 -07:00

indexable_ruleset.h

Add an indexable ruleset that can split filters by ruleset/evttype

2024-06-14 11:39:32 -07:00

indexed_vector.h

update: add SPDX license identifier

2023-09-21 13:21:47 +02:00

logger.cpp

refactor(userspace): move falco logger under falco engine

2024-05-23 09:29:23 +02:00

logger.h

refactor(userspace): move falco logger under falco engine

2024-05-23 09:29:23 +02:00

OWNERS

docs: specify labels that apply to each area

2019-09-16 10:11:25 +02:00

rule_loader_collector.cpp

update(userspace/engine): support tranformers in exception fields

2024-05-08 20:23:55 +02:00

rule_loader_collector.h

new(engine): add selective overrides

2023-12-22 21:49:21 +01:00

rule_loader_compile_output.h

Provide the entire compile output to ruleset vs individual add()s

2024-01-30 20:24:33 +01:00

rule_loader_compiler.cpp

update(engine): allow using -p to pass a format to plugin events

2024-06-11 09:19:39 +02:00

rule_loader_compiler.h

refactor(userspace/engine): reduce allocations during rules loading

2024-02-09 14:50:05 +01:00

rule_loader_reader.cpp

fix(userspace/engine): make sure exception fields are not optional in replace mode

2024-05-17 14:38:57 +02:00

rule_loader_reader.h

refactor(userspace): remove libs relative imports

2024-01-31 11:51:37 +01:00

rule_loader.cpp

refactor(engine): fix variable / function shadowing

2024-02-29 16:20:34 +01:00

rule_loader.h

refactor: smart pointer usage

2024-05-06 11:10:44 +02:00

rule_loading_messages.h

new(engine): raise warning instead of error on invalid macro/list name

2024-04-17 11:27:52 +02:00

stats_manager.cpp

refactor: smart pointer usage

2024-05-06 11:10:44 +02:00

stats_manager.h

cleanup: add getter functions to stats_manager

2024-05-17 14:54:58 +02:00