Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wip: update(content): update running docs for Falco 0.34. #785

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 15 additions & 6 deletions content/en/docs/getting-started/running/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,34 +7,43 @@ weight: 4

## Run Falco as a service

If you installed Falco by using [the DEB or the RPM](/docs/getting-started/installation) package, then falco systemd service was already started and enabled for you.
If you installed Falco by using [the DEB or the RPM](/docs/getting-started/installation) package, then, if you got `dialog` package installed, you will be prompted to choose a driver.
Once you select your driver, Falco will be automatically setup to use that driver, and enabled and started for you.
In case you wish to stop or disable it, issue:


```console
systemctl disable falco
systemctl disable falco-$driver
```

```console
systemctl stop falco
systemctl stop falco-$driver
```

Then, to enable or start it back, you would need:

```console
systemctl enable falco
systemctl enable falco-$driver
```

```console
systemctl start falco
systemctl start falco-$driver
```

You can also view the Falco logs using `journalctl`.

```console
journalctl -fu falco
journalctl -fu falco-$driver
```

Note that `$driver` is one of:
* `kmod`
* `bpf`
* `modern-bpf`
* `plugin`

In case `dialog` is not installed, or Falco is installed with `DEBIAN_FRONTEND=noninteractive`, nothing will be automatically enabled.

## Run Falco manually

If you'd like to run Falco by hand, you can find the full usage description for Falco by typing:
Expand Down