Terminating tracee-rules on EOF of all files #857
AsafEitani
started this conversation in
Development
Replies: 2 comments
-
this should be the current behavior IIRC |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
When ran with the
--input-tracee file:/path/to/file
flagtracee-rules
keeps running forever after finishing processing the file.I think adding a feature, that once every file has been processed,
tracee-rules
should terminate.This could allow automation for logs originated from
tracee-ebpf
.Of course this feature will not be implemented for
--input-tracee file:stdin
flags, as there is not EOF (only termination signals).Beta Was this translation helpful? Give feedback.
All reactions