You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Falco rules have different priorities attached to them, but we only alert on P2. We should change this to make it easier for platform admins to handle alerts, as then a P1 Falco alert would be something critical, and P2 Falco alert something severe.
And make it a better experience for application developers, as they wouldn't think every alert would be an active intrusion.
Proposed alternatives
Check if it is possible to map the labels from the Falco alerts to the priorities used by Alertmanager.
Additional context
No response
Definition of done
Falco alerts have different priorities
This new feature is covered by public documentation
The text was updated successfully, but these errors were encountered:
Proposed feature
Falco rules have different priorities attached to them, but we only alert on P2. We should change this to make it easier for platform admins to handle alerts, as then a P1 Falco alert would be something critical, and P2 Falco alert something severe.
And make it a better experience for application developers, as they wouldn't think every alert would be an active intrusion.
Proposed alternatives
Check if it is possible to map the labels from the Falco alerts to the priorities used by Alertmanager.
Additional context
No response
Definition of done
The text was updated successfully, but these errors were encountered: