Terminating tracee-rules on EOF of all files #857
AsafEitani
started this conversation in
Development
Replies: 2 comments
-
|
this should be the current behavior IIRC |
Beta Was this translation helpful? Give feedback.
0 replies
-
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
When ran with the
--input-tracee file:/path/to/fileflagtracee-ruleskeeps running forever after finishing processing the file.I think adding a feature, that once every file has been processed,
tracee-rulesshould terminate.This could allow automation for logs originated from
tracee-ebpf.Of course this feature will not be implemented for
--input-tracee file:stdinflags, as there is not EOF (only termination signals).Beta Was this translation helpful? Give feedback.
All reactions