diff --git a/Falco-Formatting-for-Containers-and-Orchestration.md b/Falco-Formatting-for-Containers-and-Orchestration.md index 4a70525..1aed92c 100644 --- a/Falco-Formatting-for-Containers-and-Orchestration.md +++ b/Falco-Formatting-for-Containers-and-Orchestration.md @@ -41,20 +41,4 @@ $ falco -pk -k $ falco -p "This is Some Extra" -k 15:50:18.866559081: Warning File below a known binary directory opened for writing (user=root command=touch /bin/hack file=/bin/hack) This is Some Extra -``` - -``` -output: "Namespace change (setns) by unexpected program (user=%user.name command=%proc.cmdline parent=%proc.pname %container.info)" - -$ falco - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube k8s-kubelet (id=4a4021c50439)) - -$ falco -pk -k - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube XXX) - -$ falco -p "This is Some Extra" -k - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube XXX) This is Some Extra ``` \ No newline at end of file