adding chan out

tracee-ebpf/tracee/pipeline.go

@@ -197,13 +197,22 @@ func (t *Tracee) prepareEventForPrint(done <-chan struct{}, in <-chan RawEvent)
 
 func (t *Tracee) printEvent(done <-chan struct{}, in <-chan external.Event) (<-chan error, error) {
 	errc := make(chan error, 1)
-	go func() {
-		defer close(errc)
-		for printEvent := range in {
-			t.stats.eventCounter.Increment()
-			t.printer.Print(printEvent)
-		}
-	}()
+	if t.config.ChanEvents == nil {
+		go func() {
+			defer close(errc)
+			for printEvent := range in {
+				t.stats.eventCounter.Increment()
+				t.printer.Print(printEvent)
+			}
+		}()
+	} else {
+		go func() {
+			defer close(errc)
+			for event := range in {
+				t.config.ChanEvents <- event
+			}
+		}()
+	}
 	return errc, nil
 }
 

tracee-ebpf/tracee/tracee.go

@@ -33,6 +33,7 @@ type Config struct {
 	SecurityAlerts     bool
 	maxPidsCache       int // maximum number of pids to cache per mnt ns (in Tracee.pidsInMntns)
 	BPFObjPath         string
+	ChanEvents         chan external.Event
 }
 
 type Filter struct {