Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change log timestamp to ISO8601 w/ timezone #518

Merged
merged 4 commits into from
Apr 9, 2019

Commits on Apr 5, 2019

  1. Add option to display times in ISO 8601 UTC

    ISO 8601 time is useful when, say, running falco in a container, which
    may have a different /etc/localtime than the host system.
    
    A new config option time_format_iso_8601 controls whether log message
    and event times are displayed in ISO 8601 in UTC or in local time. The
    default is false (display times in local time).
    
    This option is passed to logger init as well as outputs. For outputs it
    eventually changes the time format field from %evt.time/%jevt.time to
    %evt.time.iso8601/%jevt.time.iso8601.
    
    Adding this field changes the falco engine version so increment it.
    
    This depends on draios/sysdig#1317.
    mstemm committed Apr 5, 2019
    Configuration menu
    Copy the full SHA
    3e9e468 View commit details
    Browse the repository at this point in the history
  2. Unit test for ISO 8601 output

    A unit test for ISO 8601 output ensures that both the log and event time
    is in ISO 8601 format.
    mstemm committed Apr 5, 2019
    Configuration menu
    Copy the full SHA
    9ed7319 View commit details
    Browse the repository at this point in the history
  3. Use ISO 8601 output by default in containers

    Now that we have an option that controls iso 8601 output, use it by
    default in containers. We do this by changing the value of
    time_format_iso_8601 in falco.yaml in the container.
    mstemm committed Apr 5, 2019
    Configuration menu
    Copy the full SHA
    c4bc599 View commit details
    Browse the repository at this point in the history

Commits on Apr 8, 2019

  1. Handle errors in strftime/asctime/gmtime

    A placeholder "N/A" is used in log messages instead.
    mstemm committed Apr 8, 2019
    Configuration menu
    Copy the full SHA
    73af996 View commit details
    Browse the repository at this point in the history