Contents

Kubernetes Falco Logs

Falco Log Config

/etc/falco/falco.yaml

1
2
3
4
5
6
7
...
# Where security notifications should go.
# Multiple outputs can be enabled.

syslog_output:
  enabled: true
...

Check System Logs

1
cat /var/log/syslog | grep falco