CLI filter with container name

[errordeveloper]

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem?

No response

Describe the feature you would like

To be able to do some quick things with CLI it'd be very handy to specify a container name.

There is no jq inside the tetragon pod, which and even having installed it one needs to figure out a filter expression and cover the types of events user is interested in also.
It's also not obvious that one can use compact output format using a pipe. It'd be easier if there was a flag.

Here is what I had to use:

tetra getevents --namespace foo --pod=foo 
   | jq 'select(.process_exec.process.pod.container.name == "bar", .process_exit.process.pod.container.name == "bar")'
   | tetra getevents -o compact

It's workable, but having a simple flag would have been nicer, of course.

Describe your proposed solution

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[mtardy]

Hey, thank you for the suggestion, sure! Looks like a good first issue someone could pick. You can implement it as well if you have the time.

[prateek041]

Hello Tetragon team, I would love to pick this up if no one else is working on this.