Nadav Strahilevitz

Thanks for addressing my comment, could you please add event documentation as well? Sorry for asking again, I didn't notice it was missing before.

Since #2116 was merged this can move forward right?

So about sugared logs - by design we shouldn't have noisy logs, so i'm ok with moving there. @josedonizetti We want to keep the log counting to silence the noisy...

> @geyslan @NDStrahilevitz @rafaeldtinoco Wonder if it would be okay to simplifyy the scope here? > > 1 - add a basic logger, and change both tracee-ebpf and tracee-rules main.go...

So about the flags or arguments "debate", we can have both, and i've noted in previous reviews that the flag isn't working anymore, perhaps I didn't make it clear that...

@geyslan I think this is good enough for now, i'll approve and let's merge after the rebase. About all the init logic and how I think it will become clearer...

Hey, I've created a PoC for a json configuration file structure, one for tracee-rules and another for tracee-ebpf [you can find it here](https://github.com/aquasecurity/tracee/files/7815587/tracee-configs-poc.zip). The tracee-rules one is pretty simple since...

> Hello :) IMO we don't need more "prepare" or parsing functions, if anything we want to remove the ones we have. we should have just one way of parsing...

@itaysk Alright, if the vision is having the config file just be a 1 to 1 copy of the cli options, then there are obviously simpler options than what i've...

In regards to using altsrc, there are some quirks this package seems to have: 1. Every wrapped flag is required to appear in the configuration file, even if it's not...