net_flow_tcp_begin missing in logs #3921
Unanswered
Ziphone
asked this question in
Questions and Help
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Environment
Azure AKS, K8s: 1.27, OS: Ubuntu 22.04.4 LTS, Kernel: 5.15.0-1057-azure
Installation: Helm, chart: tracee, version 0.20.0
Issue
My cluster hosts numerous services, which is reflected by a lot of
net_tcp_connect
,security_socket_connect
, andnet_packet_http_request
events in the Tracee logs. Despite includingnet_flow_tcp_begin
in my Policy resource, I don't get any such events. I have also testedtracee --output json --events net_flow_tcp_begin
, with no luck.Is this new event enabled? Could there be any gotchas I have missed out on?
Beta Was this translation helpful? Give feedback.
All reactions