-
**Describe the bug**
When loading rules, falco finds the rules file as invalid with the following error:
```
LOAD_ERR_COMPILE_OUTPUT (Error compiling output):
....
has an invalid index argume…
-
**Describe the bug**
When I run falco as a demonset in least priviledge mode using the edpf driver on a red hat enterprise linux 8.9, I see multiple falco process restarts in the logs on a kubernetes…
-
**Describe the bug**
Error: could not parse param 13 (comm) for event 10224646 of type 223 (clone): expected length 10, found 14
**How to reproduce it**
It will happen by periodically aut…
-
**Describe the bug**
Run [deepflow](https://github.com/deepflowio/deepflow) and falco ebpf mode
- If you start deepflow first, and then start falco, falco will report the following logs
```…
-
**Describe the bug**
```
[1047486.856617] falco: deallocating consumer ffff9aba94a2a0e0
[1047486.938918] BUG: unable to handle kernel paging request at ffffac4fe972383e
[1047486.943701] falc…
-
rule:
```yaml
- rule: procoess exec
desc: notice process exec
condition: >
(evt.dir=< and evt.type in (execve, execveat) and not proc.exepath in (dyrace) and not proc.cmdline contains "/o…
-
**Describe the bug**
This is a simple setup: falco(systemd) -> falcosidekick(docker) -> falcosidekick-ui(docker) + redis(docker). We run falco on all machines while the sidekick/ui/redis stack live…
-
**Description**
I am attempting to include additional rule files including the sandbox and incubating rules. I'm doing this in a Helm chart using the following documentation [here](https://falco.or…
-
We I go the web address of a running `falcosidekick-ui`, the browser receives `{"message":"Not Found"}` instead of the HTML-based web page.
URL: http://localhost:2802/
This issue happens on falcos…
-
**Describe the bug**
We are getting the `interface conversion: interface {} is []string, not string` error in our logs.
**How to reproduce it**
Install the Falco Helm chart with Falcosideki…
ctdfo updated
2 weeks ago