talon.md

Falco Talon

• Category: Response engine
• Website: https://docs.falco-talon.org

Table of content

• Falco Talon
  • Table of content
  • Configuration
  • Example of config.yaml
  • Additional info
  • Screenshots

Configuration

Setting	Env var	Default value	Description
talon.address	TALON_ADDRESS		Talon address, if not empty, Talon output is enabled
talon.checkcert	TALON_CHECKCERT	true	Check if ssl certificate of the output is valid
talon.minimumpriority	TALON_MINIMUMPRIORITY	"" (= debug)	Minimum priority of event for using this output, order is emergency,alert,critical,error,warning,notice,informational,debug or ""

Note

The Env var values override the settings from yaml file.

Example of config.yaml

talon:
  address: "" # Talon address, if not empty, Talon output is enabled
  # minimumpriority: "" # minimum priority of event for using this output, order is emergency|alert|critical|error|warning|notice|informational|debug or "" (default)
  # checkcert: true # check if ssl certificate of the output is valid (default: true)

Additional info

Warning

Falco Talon is active under development and this integration may change in the future to reflect this evolution.

Screenshots