dmeetreey comments

Results 5 comments of


                                            dmeetreey

Container information missing in the alerts generated by the "Privileged Shell Spawned in Container" rule.

/kind bug

Container information missing in the alerts generated by the "Privileged Shell Spawned in Container" rule.

Hi, @leogr! > @UgniusV > > * have you used Helm? Or have you deployed Falco directly on a host using the package (deb/rpm/tar) installation? > * I can't see...

Container information missing in the alerts generated by the "Privileged Shell Spawned in Container" rule.

> Hey @dmeetreey > > Thank you! > > Just one doubt: > > > 1. Yes, we are using Helm. > > 2. Updated the config with container_engines, will...

[libs]: container: cannot attach container_id to new process event for the thread id '415160': can't get table entry: get_entry found no element at given key

Same issue. I get 5mil + logs per 15 minutes. Falco 0.42.1, Container 0.4.1. Any quick fix for this? This throttles log consumption.

Falco 0.42.1 random memory usage spikes

Tried disabling k8saudit and json plugins, but these spikes are still present.