From 9ab6ea5cce774feb773a92b893f6bc821d1c0afc Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Mon, 11 Feb 2019 14:47:38 -0800 Subject: [PATCH] Updated Falco Configuration (markdown) --- Falco-Configuration.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/Falco-Configuration.md b/Falco-Configuration.md index 9b140b3..c09f56f 100644 --- a/Falco-Configuration.md +++ b/Falco-Configuration.md @@ -88,6 +88,14 @@ a list containing these sub-keys: * `keep_alive: [true|false]`: If false (default), run program for each alert. If true, will spawn program once and keep it open for all alerts. Might be necessary to also specify `--unbuffered` on falco command line. * `program: `: the program to run for each alert. This is started via a shell, so you can specify a command pipeline to allow for additional formatting. +#### http_output + +a list containing these sub-keys: +* `enabled: [true|false]`: if true, falco alerts will be sent to the specified url +* `url: `: Send alerts to the provided url. + +For more details, see [the full documentation on http outputs](https://github.com/falcosecurity/falco/wiki/Falco-Alerts#new-in-0141-http-url). + #### `webserver` a list containing these sub-keys: