Mahé

> Why JSON query is important in this context ? I think it's just to follow convention since nobody uses `array.[idx].field`, from a UX PoV I think it makes sense...

is it ready for re-review @kyledong-suse ? :)

> [@mtardy](https://github.com/mtardy) thanks for merging [#4158](https://github.com/cilium/tetragon/pull/4158) ! I'm still working on this issue via [#4244](https://github.com/cilium/tetragon/pull/4244) . Could you please keep this one open? Ah maybe do not add `Fixes:` next...

> > Ah maybe do not add Fixes: next time if it's just the first step, maybe Partially fixes or something like that :)! > > My bad. I will...

Hey, yeah things have changed since the blogpost by grsecurity was written (3/4 years ago now), iirc the post was mostly complaining about wording in one of our blogpost. >...

> [@mtardy](https://github.com/mtardy) BTW, how effective is Tetragon for Network Observability? Does it significantly impact resource consumption? What are its weaknesses? I've heard the opinion that this isn't practical, as there...

Hey 👋 thanks for opening this issue. Let me give you a first answer to some of the topics here. ### On programs > Of course, the number of progs...

cc @kkourt as I know (with other people) he's been digging into scaling the number of policies recently as well.

> For the memory utilization, `bpf.BPF_F_NO_PREALLOC` option should reduce the memory utilization a lot from ebpf maps, but apparently Tetragon only enabled `bpf.BPF_F_NO_PREALLOC` on [some of maps](https://github.com/search?q=repo%3Acilium%2Ftetragon++BPF_F_NO_PREALLOC&type=code). I wonder if...

> Just a quick recap (the following is tailored to our use case discussed previously in this issue): Thanks a lot that's useful to have that kind of recap, please...