config_example.yaml

listenAddress: "0.0.0.0" # default: "0.0.0.0"
listenPort: "2803" # default: "2803"
rulesFile: "./rules.yaml" # default: "./rules.yaml"
# kubeConfig: "~/.kube/config" # only if Falco Talon is running outside Kubernetes
logFormat: "color" # Log Format: text, color, json (default: color)
watchRules: true # reload if the rules file changes (default: true)

defaultNotifiers: # this notifiers will be enabled for all rules
  - k8saudit

notifiers:
  slack:
    webhookurl: "https://hooks.slack.com/services/XXXX"
    # icon: "" # default: "https://upload.wikimedia.org/wikipedia/commons/2/26/Circaetus_gallicus_claw.jpg"
    # username: "" # default: "Falco Talon"
    footer: "" # default: "https://github.com/Issif/falco-talon"
    format: long # default: long
  # webhook:
  #   url: ""
  # smtp:
  #   hostport: ""
  #   from: ""
  #   to: ""
  #   user: ""
  #   password: ""
  #   format: "html"