feat(falcosidekick): added new ListenAddr field in falcoEvent (#196)

* feat(falcosidekick): added new `ListenAddr` field in `falcoEvent` Signed-off-by: Dwi Siswanto <[email protected]> * feat(teler): impl new `ListenAddr` output fields for Falco event Signed-off-by: Dwi Siswanto <[email protected]> * docs(README): add new `ListenAddr` field desc Signed-off-by: Dwi Siswanto <[email protected]> --------- Signed-off-by: Dwi Siswanto <[email protected]>
teler-sh · Jun 7, 2024 · 2a63420 · 2a63420
1 parent ec7cd92
commit 2a63420
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -439,6 +439,7 @@ The event forwarded to Falco Sidekick instance includes the following informatio
 	* **`teler.caller`**: Identifies the application source that invoked teler-waf.
 	* **`teler.id`**: Represents a unique identifier for the rejected request.
 	* **`teler.threat`**: Specifies the category of the threat.
+  * **`teler.listen_addr`**: Denotes the network address on which teler-waf is listening for incoming requests.
 	* **`request.body`**: Contains the body of the associated request.
 	* **`request.headers`**: Lists the headers from the associated request.
 	* **`request.ip_addr`**: Discloses the IP address of the associated request.

diff --git a/falcosidekick.go b/falcosidekick.go
@@ -29,6 +29,7 @@ type falcoEvent struct {
 		Caller         string `json:"teler.caller"`
 		ID             string `json:"teler.id"`
 		Threat         string `json:"teler.threat"`
+		ListenAddr     string `json:"teler.listen_addr"`
 		RequestBody    string `json:"request.body"`
 		RequestHeaders string `json:"request.headers"`
 		RequestIPAddr  string `json:"request.ip_addr"`

diff --git a/teler.go b/teler.go
@@ -431,6 +431,7 @@ func (t *Teler) sendLogs(r *http.Request, k threat.Threat, id string, msg string
 	event.OutputFields.Caller = t.caller
 	event.OutputFields.ID = id
 	event.OutputFields.Threat = cat
+	event.OutputFields.ListenAddr = listenAddr
 	event.OutputFields.RequestBody = string(body)
 	event.OutputFields.RequestHeaders = string(jsonHeaders)
 	event.OutputFields.RequestIPAddr = ipAddr