From 06c534e8f7bc76da70a43bae03611eba91f63e06 Mon Sep 17 00:00:00 2001
From: Mark Stemm <mark.stemm@sysdig.com>
Date: Mon, 9 Oct 2017 16:09:13 -0700
Subject: [PATCH] Updated Falco Configuration (markdown)

---
 Falco-Configuration.md | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/Falco-Configuration.md b/Falco-Configuration.md
index 2530499..4f5a4c9 100644
--- a/Falco-Configuration.md
+++ b/Falco-Configuration.md
@@ -7,12 +7,18 @@ Any configuration option can be overridden on the command line via the `-o/--opt
 
 The current configuration keys are:
 
-#### `rules_file:
-        - <path1>
-        - <path2>
-        - ...`
+#### `rules_file: [<path1>, <path2>, ...]`
 
-the location of the rules file(s). This can contain one or more paths to separate rules files. You can also specify multiple rules files on the command line via one or more `-r` options.
+the location of the rules file(s). This can contain one or more paths to separate rules files. In falco.yaml, this is expressed as the equivalent:
+
+```yaml
+rules_file:
+  - <path1>
+  - <path2>
+  - ...
+```
+
+You can also specify multiple rules files on the command line via one or more `-r` options.
 
 #### `json_output: [true|false]`