theopolis
bpf_process_events
and es_process_events
, should we rename the original to audit_process_events
? The code should facilitate this "aliasing" without breaking people's existing queries. Essentially process_events
will become a clone, of audit_process_events
and will not show up in documentation/schema listing, but the virtual table will exist.sundsta
10/16/2020, 3:17 PMMike Myers
10/16/2020, 3:39 PMalessandrogario
theopolis