truncate output fiels with a length > 512 chars, a payload > 4096 is …

…not accepted by a lot of outputs

Signed-off-by: Thomas Labarussias <[email protected]>

handlers.go

@@ -195,9 +195,21 @@ func newFalcoPayload(payload io.Reader) (types.FalcoPayload, error) {
 		}
 	}
 
+	for i, j := range falcopayload.OutputFields {
+		switch j.(type) {
+		case string:
+			if len(j.(string)) > 512 {
+				k := j.(string)[:507] + "[...]"
+				falcopayload.Output = strings.ReplaceAll(falcopayload.Output, j.(string), k)
+				falcopayload.OutputFields[i] = k
+			}
+		}
+	}
+
+	fmt.Println(falcopayload.String())
+
 	if config.Debug {
-		body, _ := json.Marshal(falcopayload)
-		log.Printf("[DEBUG] : Falco's payload : %v\n", string(body))
+		log.Printf("[DEBUG] : Falco's payload : %v\n", falcopayload.String())
 	}
 
 	return falcopayload, nil