falcosecurity / falcosidekick

Connect Falco to your ecosystem
Apache License 2.0
548 stars 179 forks source link

[Slack Alerts] Change Header to only include Rule Name #15

Closed natalysheinin closed 5 years ago

natalysheinin commented 5 years ago

Currently, if your falco rule output is fairly long, each slack alert by falcosidekick will spit out a really ugly json blob (even though that information is already captured in the slack event right below).

I think it may make sense to change it to be just the rule name or configurable via environment variables.

image

Issif commented 5 years ago

Hi,

Do you mean something like that?

image

I can add an variable SLACK_DETAILED_FIELDS=(true|false) to handle that.

Issif commented 5 years ago

merged with #18

Issif commented 5 years ago

fixed by #19