From fee4776723002772afecc39f99502f185be3175e Mon Sep 17 00:00:00 2001 From: Ioannis Androulidakis Date: Thu, 11 Jan 2024 23:23:55 +0100 Subject: [PATCH] cmd/tetra: Add option to filter events based on policy names Closes #1855 Signed-off-by: Ioannis Androulidakis --- cmd/tetra/getevents/getevents.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/cmd/tetra/getevents/getevents.go b/cmd/tetra/getevents/getevents.go index 540505facbb..4f416f4e256 100644 --- a/cmd/tetra/getevents/getevents.go +++ b/cmd/tetra/getevents/getevents.go @@ -53,6 +53,7 @@ type Opts struct { Timestamps bool TTYEncode string StackTraces bool + PolicyNames []string } var Options Opts @@ -97,6 +98,10 @@ var GetFilter = func() *tetragon.Filter { filter.EventSet = append(filter.EventSet, eventType) } } + if len(Options.PolicyNames) > 0 { + filter.PolicyNames = Options.PolicyNames + } + return &filter } @@ -214,5 +219,6 @@ func New() *cobra.Command { flags.BoolVar(&Options.Timestamps, "timestamps", false, "Include timestamps in compact output") flags.StringVarP(&Options.TTYEncode, "tty-encode", "t", "", "Encode terminal data by file path (all other events will be ignored)") flags.BoolVar(&Options.StackTraces, "stack-traces", true, "Include stack traces in compact output") + flags.StringSliceVar(&Options.PolicyNames, "policy-names", nil, "Get events by tracing policy names") return &cmd }