Do not stop collecting events when journal entries change (elastic#9994)

Previously sd_journal_wait was not used. From now on all changes to journals are detected. I also added custom seccomp policy to Journalbeat. Closes elastic#9533
DStape · Jan 28, 2019 · 49c75cd · 49c75cd
1 parent 5a682a9
commit 49c75cd
Show file tree

Hide file tree

Showing 4 changed files with 328 additions and 20 deletions.
diff --git a/beater/journalbeat.go b/beater/journalbeat.go
@@ -31,6 +31,7 @@ import (
 	"github.com/elastic/beats/libbeat/logp"
 
 	"github.com/elastic/beats/journalbeat/config"
+	_ "github.com/elastic/beats/journalbeat/include"
 )
 
 // Journalbeat instance

diff --git a/include/seccomp_linux_386.go b/include/seccomp_linux_386.go
diff --git a/include/seccomp_linux_amd64.go b/include/seccomp_linux_amd64.go