diff --git a/userspace/falco/app_actions/load_rules_files.cpp b/userspace/falco/app_actions/load_rules_files.cpp index 83a338b1..68576eeb 100644 --- a/userspace/falco/app_actions/load_rules_files.cpp +++ b/userspace/falco/app_actions/load_rules_files.cpp @@ -123,9 +123,6 @@ application::run_result application::load_rules_files() return run_result::fatal(plugin_vers_err); } - // Free-up memory for the rule loader, which is not used from now on - m_state->engine->clear_loader(); - for (const auto& substring : m_options.disabled_rule_substrings) { falco_logger::log(LOG_INFO, "Disabling rules matching substring: " + substring + "\n"); diff --git a/userspace/falco/app_actions/open_inspector.cpp b/userspace/falco/app_actions/open_inspector.cpp index bbb2e20b..0f9aa85d 100644 --- a/userspace/falco/app_actions/open_inspector.cpp +++ b/userspace/falco/app_actions/open_inspector.cpp @@ -26,6 +26,9 @@ typedef std::function inspector)> open_t; application::run_result application::open_inspector() { + // Notify engine that we finished loading and enabling all rules + m_state->engine->complete_rule_loading(); + if(is_capture_mode()) { // Try to open the trace file as a