diff --git a/falco.yaml b/falco.yaml
index df82ad81..09ef987d 100644
--- a/falco.yaml
+++ b/falco.yaml
@@ -246,6 +246,7 @@ program_output:
 http_output:
   enabled: false
   url: http://some.url
+  user_agent: "falcosecurity/falco"
 
 # Falco supports running a gRPC server with two main binding types
 # 1. Over the network with mandatory mutual TLS authentication (mTLS)
diff --git a/userspace/falco/outputs_http.cpp b/userspace/falco/outputs_http.cpp
index 9f020ee0..afdc76ab 100644
--- a/userspace/falco/outputs_http.cpp
+++ b/userspace/falco/outputs_http.cpp
@@ -34,7 +34,7 @@ void falco::outputs::output_http::output(const message *msg)
 		} else {
 			slist1 = curl_slist_append(slist1, "Content-Type: text/plain");
 		}
-        slist1 = curl_slist_append(slist1, m_oc.options["user_agent"].c_str());
+		slist1 = curl_slist_append(slist1, m_oc.options["user_agent"].c_str());
 
 		curl_easy_setopt(curl, CURLOPT_HTTPHEADER, slist1);
 		curl_easy_setopt(curl, CURLOPT_URL, m_oc.options["url"].c_str());