mirror of
https://github.com/falcosecurity/falco.git
synced 2025-08-25 09:28:55 +00:00
new: Falco config for output timeout
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
This commit is contained in:
parent
321da3e5bf
commit
df8e4e0545
15
falco.yaml
15
falco.yaml
@ -87,6 +87,21 @@ syscall_event_drops:
|
||||
rate: .03333
|
||||
max_burst: 10
|
||||
|
||||
|
||||
# Falco continuously monitors outputs performance. When an output channel does not allow
|
||||
# to deliver an alert within a given deadline, an error is reported to the log indicating
|
||||
# which output is blocking notifications.
|
||||
# An output timeout error may indicate a misconfiguration issue or I/O problems
|
||||
# that should be fixed by the user.
|
||||
#
|
||||
# The "output_timeout" value specifies the duration in milliseconds to wait before
|
||||
# considering the deadline exceed.
|
||||
#
|
||||
# With a 2000ms default, the notification consumer can block the Falco output
|
||||
# for up to 2 seconds without reaching the timeout.
|
||||
|
||||
output_timeout: 2000
|
||||
|
||||
# A throttling mechanism implemented as a token bucket limits the
|
||||
# rate of falco notifications. This throttling is controlled by the following configuration
|
||||
# options:
|
||||
|
Loading…
Reference in New Issue
Block a user