Skip to content

Commit

Permalink
Add support for the event.message_like query argument (#108)
Browse files Browse the repository at this point in the history
This provides rudimentary search capabilities.

Signed-off-by: mprahl <[email protected]>
  • Loading branch information
mprahl authored Jan 15, 2024
1 parent c44dbd6 commit b5723fe
Showing 1 changed file with 6 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -246,7 +246,12 @@ just filter on the field it references. Additionally, multiple values can be spe
- direction - the direction to sort by. This defaults to `desc`. It can be `asc` or `desc`.
- event.compliance
- event.message
- event.message_includes - a filter for compliance messages that include the following substring.
- event.message_includes - a filter for compliance messages that include the following substring. Only a single value is
supported.
- event.message_like - a SQL "LIKE" filter for compliance messages. The percent sign `%` represents a wildcard of zero
or more characters. The underscore sign `*` represents a wildcard of a single character. For example
`%configmaps [%my-configmap%]%` would match any configuration policy compliance message that refers to the configmap
`my-configmap`.
- event.reported_by
- event.timestamp
- event.timestamp_after - an RFC 3339 timestamp to indicate only compliance events after this time should be shown.
Expand Down

0 comments on commit b5723fe

Please sign in to comment.