From e0ba4a2b897322593b78fb95e1813ec6c7941522 Mon Sep 17 00:00:00 2001 From: Luca Guerra Date: Mon, 19 Aug 2024 13:02:14 +0200 Subject: [PATCH] fix(docs): update rules setup documentation Signed-off-by: Luca Guerra --- content/en/docs/reference/rules/default-rules/index.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/content/en/docs/reference/rules/default-rules/index.md b/content/en/docs/reference/rules/default-rules/index.md index fe579247f..42964f179 100644 --- a/content/en/docs/reference/rules/default-rules/index.md +++ b/content/en/docs/reference/rules/default-rules/index.md @@ -15,15 +15,15 @@ By default, only the `stable` rules are loaded by Falco, you can install the `sa ```shell helm install falco falcosecurity/falco \ ---set "falcoctl.config.artifact.install.refs={falco-rules:2,falco-incubating-rules:2,falco-sandbox-rules:2}" \ ---set "falcoctl.config.artifact.follow.refs={falco-rules:2,falco-incubating-rules:2,falco-sandbox-rules:2}" \ ---set "falco.rules_file={/etc/falco/k8s_audit_rules.yaml,/etc/falco/rules.d,/etc/falco/falco_rules.yaml,/etc/falco/falco-incubating_rules.yaml,/etc/falco/falco-sandbox_rules.yaml}" +--set "falcoctl.config.artifact.install.refs={falco-rules:3,falco-incubating-rules:4,falco-sandbox-rules:4}" \ +--set "falcoctl.config.artifact.follow.refs={falco-rules:3,falco-incubating-rules:4,falco-sandbox-rules:4}" \ +--set "falco.rules_files={/etc/falco/k8s_audit_rules.yaml,/etc/falco/rules.d,/etc/falco/falco_rules.yaml,/etc/falco/falco-incubating_rules.yaml,/etc/falco/falco-sandbox_rules.yaml}" ``` -Where the option `falcoctl.config.artifact.install.refs` governs which rules are downloaded at startup, `falcoctl.config.artifact.follow.refs` identifies which rules are automatically updated and `falco.rules_file` indicates which rules are loaded by the engine. +Where the option `falcoctl.config.artifact.install.refs` governs which rules are downloaded at startup, `falcoctl.config.artifact.follow.refs` identifies which rules are automatically updated and `falco.rules_files` indicates which rules are loaded by the engine. {{% /pageinfo %}} You can find all the rules in their official [repository](https://github.com/falcosecurity/rules/blob/main/rules/). -{{< rules_list >}} \ No newline at end of file +{{< rules_list >}}