View Runtime Events

The runtime events are listed under the Events > Runtime tab. You can search for a Runtime event using the Search bar and get more details. Runtime Events are categorized as,

File Events

File events shows the file events occurred on the specified file paths mentioned in the Tracing policy. CRS currently tracks five kinds of file events - Read, Open, Write, Delete, and Rename.


Using Quick Actions, you can view the file event details in JSON format. Also, you can see the process events associated with the selected file event.
 

Process Events

CRS monitors Process events on the host and container. It currently supports two kinds of process events - Launch and Terminate. You can see Process events occuring in your container under Runtime > Process Events.


Using Quick Actions, you can view the process events details of the selected process.

 

To know about Container Runtime Sensor refer to Qualys Container Runtime Sensor Online Help.