Mark Stemm a5daf8b058 Allow append skipped rules (#346) ...

* Allow appending to skipped rules

If a rule has an append attribute but the original rule was skipped (due
to having lower priority than the configured priority), silently skip
the appending rule instead of returning an error.

* Unit test for appending to skipped rules

Unit test verifies fix for appending to skipped rules. One rules file
defines a rule with priority WARNING, a second rules file appends to
that rules file, and the configured priority is ERROR.

Ensures that falco rules without errors.

2018-04-05 10:28:45 -07:00

..

lua

Allow append skipped rules (#346)

2018-04-05 10:28:45 -07:00

CMakeLists.txt

Move rules cmakefiles from engine to falco itself

2017-10-10 14:47:33 -07:00

config_falco_engine.h.in

add an absolute-path version of FALCO_SHARE_DIR

2017-10-06 15:58:30 -07:00

falco_common.cpp

Add ability to filter events by priority/cleanups

2017-10-05 18:07:54 -07:00

falco_common.h

Add ability to filter events by priority/cleanups

2017-10-05 18:07:54 -07:00

falco_engine.cpp

Skip output json format (#342)

2018-03-28 11:24:09 -07:00

falco_engine.h

Expose evttypes for ruleset

2017-10-18 13:34:19 -07:00

formats.cpp

Skip output json format (#342)

2018-03-28 11:24:09 -07:00

formats.h

Skip output json format (#342)

2018-03-28 11:24:09 -07:00

lpeg.h

Move falco engine to its own library.

2016-10-24 15:56:45 -07:00

lyaml.h

Move falco engine to its own library.

2016-10-24 15:56:45 -07:00

rules.cpp

Add ability to filter events by priority/cleanups

2017-10-05 18:07:54 -07:00

rules.h

Add ability to filter events by priority/cleanups

2017-10-05 18:07:54 -07:00

token_bucket.cpp

Add ability to claim multiple tokens.

2017-05-02 11:46:20 -07:00

token_bucket.h

Add ability to claim multiple tokens.

2017-05-02 11:46:20 -07:00