net_flow_tcp_begin missing in logs #3921
Unanswered
Ziphone
asked this question in
Questions and Help
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Environment
Azure AKS, K8s: 1.27, OS: Ubuntu 22.04.4 LTS, Kernel: 5.15.0-1057-azure
Installation: Helm, chart: tracee, version 0.20.0
Issue
My cluster hosts numerous services, which is reflected by a lot of
net_tcp_connect
,security_socket_connect
, andnet_packet_http_request
events in the Tracee logs. Despite includingnet_flow_tcp_begin
in my Policy resource, I don't get any such events. I have also testedtracee --output json --events net_flow_tcp_begin
, with no luck.Is this new event enabled? Could there be any gotchas I have missed out on?
Beta Was this translation helpful? Give feedback.
All reactions