From f78a7376cb201c102607e667eada06b6a941e079 Mon Sep 17 00:00:00 2001 From: Mark Stemm Date: Mon, 9 Oct 2017 16:49:49 -0700 Subject: [PATCH] Updated Running Falco (markdown) --- Running-Falco.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Running-Falco.md b/Running-Falco.md index a3e3673..fd9e935 100644 --- a/Running-Falco.md +++ b/Running-Falco.md @@ -73,6 +73,11 @@ Options: Can not be specified with -t. -t Only run those rules with a tag=. Can be specified multiple times. Can not be specified with -T/-D. + -U,--unbuffered Turn off output buffering to configured outputs. This causes every + single line emitted by falco to be flushed, which generates higher CPU + usage but is useful when piping those outputs into another process + or into a script. + -V,--validate Read the contents of the specified rules file and exit -v Verbose output. --version Print version number. ```