ADR and Falco events to OpenSearch

[mtcolman]

Hello, this is more of a query than an issue. I'm deploying this onto OpenShift but I'm not getting events from Falco and ADR appearing in OpenSearch. I know events are occurring because I can see them in the Falco pod logs if I run oc logs <falco-pod-name> and I have incidents and issues being created in Contrast Northstar UI when I run the simulator.

Can you please confirm what configuration is collecting/forwarding/sending ADR and Falco events to OpenSearch, so that I can check I have it in place? Thank you.

[mtcolman]

Here's the branch I've been getting to work with OpenShift: https://github.com/mtcolman/cargo-cats/tree/openshift_installation