--- falco.yaml 2023-07-05 11:42:11.816317256 +0000 +++ zdt_falco.yaml 2023-07-05 11:31:07.476468029 +0000 @@ -238,7 +238,7 @@ # When enabled, Falco will output alert messages and rules file # loading/validation results in JSON format, making it easier for downstream # programs to process and consume the data. By default, this option is disabled. -json_output: false +json_output: true # [Stable] `json_include_output_property` # @@ -263,7 +263,7 @@ # Enabling buffering for the output queue can offer performance optimization, # efficient resource usage, and smoother data flow, resulting in a more reliable # output mechanism. By default, buffering is disabled (false). -buffered_outputs: false +buffered_outputs: true # [Stable] `outputs` #