Eline @eliine.dev · Nov 3 1 / 2
But what to do with these events? Falco also has a system called Falcosidekick which does two things. First, it enables you to forward events to other systems, like a SIEM or PagerDuty. Second, it provides a neat UI to visualise events and stats.
1 likes 1 replies
?
Replies
There’s also a third system that is in alpha called Falco Talon. This system allows you to react to events immediately based on rules. For example you could say that a set of rules would terminate the container immediately! Or it could run a script, do a tcpdump, cordon a node or many other things 💫