[Action/Falco] Monitor Kernel event rate from Falco

[nikimanoledaki]

This is a Falco-specific metrics. The kernel event rate reflects the server load e.g. from workloads. Falco's kernel-side & userspace event counts & tracepoint invocation counts could help [source]

[AntonioDiTuri]

I read this doc page: https://falco.org/docs/metrics/falco-metrics/

and I was wondering if it was enough to add the metric object enabled to the falco.yaml to have the kernel_rate_event in that file as well :slightly_smiling_face:

Then I realized in the cncf-green-review-testing folder there is no falco.yaml. Is the page I mentioned before relevant to our setup?

@incertum do you need some extra settings on your side to let the kernel_event metric be written in the file under /tmp/stats?

[nikimanoledaki]

Let's redirect all discussion related to this issue here: https://github.com/falcosecurity/cncf-green-review-testing/issues/11

[nikimanoledaki]

Blocked while we wait for Falco Prometheus exporter (post-KubeCon)