-
{"comm":"postgres","container_id":"cf6c2ebecb20","content_key":"","dnat_ip":"","dnat_port":"-1","dns_domain":"","dns_id":"0","dns_ip":"","dns_rcode":"0","dst_container_id":"cf6c2ebecb20","dst_ip":"172…
-
**Describe the bug**
When starting falco on EKS with:
```
- '--k8s-node'
- $(FALCO_K8S_NODE_NAME)
```
we've experienced **whole DaemonSet failures** (all new pods failing t…
-
**Motivation**
Plugins can support [the field extraction capability](https://falco.org/docs/plugins/#field-extraction-capability) that allow them to add new fields in the engine that can be used in…
-
**Motivation**
Support for "Falco native resource utilization metrics" is high up on the wish list of SREs I have the pleasure to work with.
While many end users sustaining a large deployment alre…
-
Hey there — thanks very much for Falco, it’s an amazing bit of software! 👋
So, we almost exclusively deploy all our images by sha256 digest, as opposed to by tag, and when attempting to update Fal…
-
**What happened**:
We observed an error log under a large scale load test.
Wed Aug 21 02:21:40 2019: Runtime error: Socket handler (k8s_pod_handler_state): read more than 30MB of data from https:/…
-
# Motivation
The plugin system allows Falco to open new kinds of event sources that go beyond the historical syscall use case. Recently, this has been leveraged to port the k8s audit log event sour…
-
**Describe the bug**
When attempting to run Falco 0.32.0 that is configured to load plugin in development that is a field extraction plugin that supports field extraction regardless of sour…
-
/area blog
**What would you like to be added**:
### Falco Project: 2022 recap
Dear Falco community,
As we write this, it’s unbelievable that 2022 is wrapping up and very soon! As always…
-
**Motivation**
In an effort to improve the reliability of the repository, I think it would be a good idea if we wrote automated tests that could (hopefully one day) run as part of the PR checks.
…