gRPC outputs: stream drop alerts

[leodido]

What would you like to be added:

In case the event is dropped Falco emits drop alerts.

Would be nice to be able to subscribe to such alerts.

Note for me and @fntlnz : we have to evaluate whether to add such alerts to the gRPC outputs existing API to a newer one. For sure, since the event is missing we would have the same proto but without some of the fields. I think this is the main point to make our decision.

Why is this needed:

External clients and users can subscribe to drops and correlate them to outputs, visualize them, count them, and so on.

[leodido]

/milestone 0.19.0

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[leodido]

No way you close this my "dear" bot :) L.

…

On Sun, Dec 8, 2019 at 5:04 PM stale[bot] ***@***.***> wrote: This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#884?email_source=notifications&email_token=AAA5J44J6WVW2BCZ7R3KV5LQXULIBA5CNFSM4I7A4CH2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEGHCKCQ#issuecomment-562963722>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA5J4YFCJLQXMQSNTOFBQLQXULIBANCNFSM4I7A4CHQ> .

[leodido]

/milestone 0.20.0

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[leodido]

Keep

On Fri, 17 Apr 2020 at 12:08, stale[bot] ***@***.***> wrote: This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#884 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA5J45CZ3VLCGML32ODMSLRNATDLANCNFSM4I7A4CHQ> .

-- L.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[leogr]

Keeeeeep :)

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. Issues labeled "cncf", "roadmap" and "help wanted" will not be automatically closed. Please refer to a maintainer to get such label added if you think this should be kept open.

[leodido]

/help

[poiana]

@leodido:
This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.

In response to this:

/help

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[poiana]

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

[leogr]

/remove-lifecycle stale