mirror of
https://github.com/falcosecurity/falco.git
synced 2025-10-21 19:44:57 +00:00
Add the ability to keep file/program outputs open (i.e. writing to the same open file/program for multiple notifications). A new option to the file/program output "keep_alive", if true, keeps the file/program pipe open across events. This makes the need for unbuffered output aka https://github.com/draios/falco/issues/211 more pressing. Will add that next.