Melissa Kilby

/milestone 0.38.0 /assign @leogr

Initial ideas: - Add an explicit `enabled` key to allow for easier opt out - By default enabled for all logging levels not just priority level `debug` - Only report...

Goal is to correct the `-pc`, `-pk` or `-pcontainer`, `-pkubernetes` flags that do not conform to standard CLI practices. Usually `-pc` implies a combination of `-p` and `-c`. https://falco.org/docs/outputs/formatting/ https://github.com/falcosecurity/falco/blob/99781f79364264411fc4e95d8dcd1edf2629ddff/userspace/falco/app/options.cpp#L187...

Agreed @leogr let's investigate more. It's something valuable for Falco 1.x.

LGTM!

@Andreagit97 thanks for checking, wasn't aware we changed that to JSON. No this is not what we want and what is advertised as change in this PR.

Thanks for the bump, I'll take a look!

What if I pass includes over the cmd options `-o`, should be all fine right? Plus could we not allow self referencing the original `falco.yaml` in the includes. Maybe all...

Agree with entire discussion!

> > Also, an optional point: I think it would be a good idea to add /etc/falco/config.d by default as well. > > Agree! Adding it to the TODO. >...