From c9fc27ff5a8016a8c90f55ad2ec1e7bd0b6e0021 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Mon, 24 Oct 2016 15:55:53 -0700 Subject: [PATCH] Updated Falco Formatting for Containers and Orchestration (markdown) --- ...ormatting-for-Containers-and-Orchestration.md | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/Falco-Formatting-for-Containers-and-Orchestration.md b/Falco-Formatting-for-Containers-and-Orchestration.md index 4a70525..1aed92c 100644 --- a/Falco-Formatting-for-Containers-and-Orchestration.md +++ b/Falco-Formatting-for-Containers-and-Orchestration.md @@ -41,20 +41,4 @@ $ falco -pk -k $ falco -p "This is Some Extra" -k 15:50:18.866559081: Warning File below a known binary directory opened for writing (user=root command=touch /bin/hack file=/bin/hack) This is Some Extra -``` - -``` -output: "Namespace change (setns) by unexpected program (user=%user.name command=%proc.cmdline parent=%proc.pname %container.info)" - -$ falco - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube k8s-kubelet (id=4a4021c50439)) - -$ falco -pk -k - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube XXX) - -$ falco -p "This is Some Extra" -k - -15:42:35.347416068: Warning Namespace change (setns) by unexpected program (user=root parent=hyperkube XXX) This is Some Extra ``` \ No newline at end of file