fix(userspace/libsinsp): properly set successful lookup state when pa…

…rsing old container json events. Signed-off-by: Federico Di Pierro <nierro92@gmail.com>
falcosecurity · Apr 29, 2024 · d77ceb1 · d77ceb1
1 parent 32183d4
commit d77ceb1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/userspace/libsinsp/parsers.cpp b/userspace/libsinsp/parsers.cpp
@@ -5125,6 +5125,11 @@ void sinsp_parser::parse_container_json_evt(sinsp_evt *evt)
 				container_info->set_lookup_status(sinsp_container_lookup::state::FAILED);
 			}
 		}
+		else
+		{
+			// Fallback at successful state
+			container_info->set_lookup_status(sinsp_container_lookup::state::SUCCESSFUL);
+		}
 
 		const Json::Value& created_time = container["created_time"];
 		if(check_int64_json_is_convertible(created_time, "created_time"))