update(userspace/falco): add "internal" source to outputs and proto

Signed-off-by: Leonardo Grasso <[email protected]>
falcosecurity · Oct 28, 2020 · 0478ec9 · 0478ec9
1 parent 612513f
commit 0478ec9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/userspace/falco/falco_outputs.cpp b/userspace/falco/falco_outputs.cpp
@@ -196,7 +196,7 @@ void falco_outputs::handle_msg(uint64_t ts,
 	falco_outputs::ctrl_msg cmsg = {};
 	cmsg.ts = ts;
 	cmsg.priority = priority;
-	cmsg.source = "";
+	cmsg.source = "internal";
 	cmsg.rule = rule;
 	cmsg.fields = output_fields;
 

diff --git a/userspace/falco/schema.proto b/userspace/falco/schema.proto
@@ -57,4 +57,7 @@ enum source {
   k8s_audit = 1;
   K8s_audit = 1;
   K8S_audit = 1;
+  INTERNAL = 2;
+  internal = 2;
+  Internal = 2;
 }