diff --git a/falco.yaml b/falco.yaml index caa9e0bb..c604d93c 100644 --- a/falco.yaml +++ b/falco.yaml @@ -150,6 +150,7 @@ syscall_event_drops: - alert rate: .03333 max_burst: 1 + simulate_drops: false # Falco uses a shared buffer between the kernel and userspace to receive # the events (eg., system call information) in userspace.