Adding a custom logger as an event input source

[wzyhay]

Motivation
When I add rules for custom data sources, it is not always so convenient. Can the team add new event sources for rule debugging, such as logs or test demos?

Feature
The scenario is that there is a huge event stream, which requires a lot of rules to filter alarms, but it is also necessary to verify whether each rule is effective. The event source of the existing plug-in is not so convenient to use. It would be great if users could write a log file to simulate adding corresponding logs and use it as an input source to verify whether the custom rules can be hit normally through the engine.

Alternatives

Additional context

[poiana]

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale