🔧 Add NS and pod by default in loki output

Signed-off-by: afreyermuth98 <[email protected]>
falcosecurity · Jan 6, 2025 · 0b7dc26 · 0b7dc26
1 parent d49dfc7
commit 0b7dc26
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/outputs/loki.go b/outputs/loki.go
@@ -33,6 +33,13 @@ func newLokiPayload(falcopayload types.FalcoPayload, config *types.Configuration
 	s["source"] = falcopayload.Source
 	s["priority"] = falcopayload.Priority.String()
 
+	if k8sNs, ok := falcopayload.OutputFields["k8s.ns.name"].(string); ok {
+        s["k8s_ns_name"] = k8sNs
+    }
+    if k8sPod, ok := falcopayload.OutputFields["k8s.pod.name"].(string); ok {
+        s["k8s_pod_name"] = k8sPod
+    }
+
 	for i, j := range falcopayload.OutputFields {
 		switch v := j.(type) {
 		case string: