github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-02 15:15:17 +00:00
Code Issues Projects Releases Wiki Activity

Updated Falco Configuration (markdown)

Mark Stemm
2019-02-11 14:47:38 -08:00
parent baab6c08f1
commit 9ab6ea5cce
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
Falco-Configuration.md

@@ -88,6 +88,14 @@ a list containing these sub-keys:
* `keep_alive: [true|false]`: If false (default), run program for each alert. If true, will spawn program once and keep it open for all alerts. Might be necessary to also specify `--unbuffered` on falco command line.
* `program: <program>`: the program to run for each alert. This is started via a shell, so you can specify a command pipeline to allow for additional formatting.
#### http_output
a list containing these sub-keys:
* `enabled: [true|false]`: if true, falco alerts will be sent to the specified url
* `url: <url>`: Send alerts to the provided url.
For more details, see [the full documentation on http outputs](https://github.com/falcosecurity/falco/wiki/Falco-Alerts#new-in-0141-http-url).
#### `webserver`
a list containing these sub-keys: