From 0b29b122e180e4d9270b78f67ae57300a888d52e Mon Sep 17 00:00:00 2001
From: Mark Stemm <mark.stemm@sysdig.com>
Date: Wed, 20 Feb 2019 09:32:14 -0800
Subject: [PATCH] falco.yaml: change default program_output action (#507)
 (#541)

falco-CLA-1.0-signed-off-by: Xiang Dai <764524258@qq.com>1
---
 falco.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/falco.yaml b/falco.yaml
index 84d28931..b455bebd 100644
--- a/falco.yaml
+++ b/falco.yaml
@@ -137,7 +137,7 @@ webserver:
 program_output:
   enabled: false
   keep_alive: false
-  program: mail -s "Falco Notification" someone@example.com
+  program: "jq '{text: .output}' | curl -d @- -X POST https://hooks.slack.com/services/XXX"
 
 http_output:
   enabled: false