falcosecurity/falcosidekick 2.30.0

on GitHub

2.30.0 - 2024-11-27

New

• New output: Webex (PR#979 thanks to @k0rventen)
• New output: OTLP Metrics (PR#1012 thanks to @ekoops)
• New output: Datadog Logs (PR#1052 thanks to @yohboy)

Enhancement

• Reuse of the http client for 3-4x increase of the throughput (PR#962 thanks to @alekmaus)
• Improve outputs throughput handling (PR#966 thanks to @alekmaus)
• Batching and gzip compression for the Elastticsearch output (PR#967 thanks to @alekmaus)
• Use the same convention for the Prometheus metrics than Falco (PR#995)
• Add APIKey for Elasticsearch output (PR#980 thanks to @alekmaus)
• Add Pipeline configuration for Elasticsearch output (PR#981 thanks to @alekmaus)
• Add MessageThreadID configuration in Telegram output (PR#1008 thanks to @vashian)
• Support multi-architecture in build (PR#1024 thanks to @nickytd)
• Add falco as source for the Datadog Events (PR#1043 thanks to @maxd-wttj)
• Support AlertManager output in HA mode (PR#1051)

Fix

• Fix PolicyReports created in the same namespace than previous event (PR#978)
• Fix missing customFields/extraFields in the Elasticsearch payload (PR#1033)
• Fix incorrect key name for CloudEvent spec attribute (PR#1051)