Skip to content

Commit

Permalink
fix(content): applying review suggestion
Browse files Browse the repository at this point in the history
Co-authored-by: Thomas Labarussias <issif+github@gadz.org>
Signed-off-by: Leonardo Grasso <me@leonardograsso.com>
  • Loading branch information
2 people authored and poiana committed Jan 13, 2025
1 parent be08ec7 commit cdedece
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion content/en/docs/concepts/event-sources/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ This enables only the `syscall` and `k8s_audit` sources.

### Using the `syscall` source without a driver

By default, Falco enables the `syscall` source and relies on a [kernel driver](/docs/concepts/event-sources/kernel/)) to capture events. However, there are timessuch as when testing, debugging, or running plugins that generate `syscall` eventswhen you may want to run Falco without a driver.
By default, Falco enables the `syscall` source and relies on a [kernel driver](/docs/concepts/event-sources/kernel/)) to capture events. However, there are timessuch as when testing, debugging, or running plugins that generate `syscall` eventswhen you may want to run Falco without a driver.

To disable the driver and still use the `syscall` source, run Falco with:

Expand Down

0 comments on commit cdedece

Please sign in to comment.