FalcoSideKick Alertmanager include "description" annotation

[msalman899]

Hello,

it would be convenient if we can add "description" annotation as well for falcosidekick alert manager forwarder.

[Issif]

Hi,

Can you elaborate what you call "description" please. If you refer to the description field in the rules, is only there for the humans to understand the rules and they are not part of the alerts from Falco.

[msalman899]

Yes indeed, actually the way we have configured alert manager receivers on our side they primarily rely on "description" annotation so it would really help if we can add "description" annotation too.

[Issif]

You should rely on the tags/rule name/priority, there's no way for falcosidekick to add the description field in the alerts, it depends of falco itself

[msalman899]

I think it should be simple by adding this line here

amPayload.Annotations["description"] = falcopayload.Output

[Issif]

OK I see what you mean now. I'll create a PR to add this annotation.