--- falco.yml.orig 2025-01-29 17:13:37.287476135 +0000 +++ falco.yaml 2025-01-29 17:03:49.774144402 +0000 @@ -522,7 +522,7 @@ # When enabled, Falco will output alert messages and rules file # loading/validation results in JSON format, making it easier for downstream # programs to process and consume the data. By default, this option is disabled. -json_output: false +json_output: true # [Stable] `json_include_output_property` # @@ -561,7 +561,7 @@ # Additionally, this setting is separate from the `output_queue` option. The output queue # sits between the rule engine and the output channels, while output buffering occurs # afterward once the specific channel implementation outputs the formatted message. -buffered_outputs: false +buffered_outputs: true # [Incubating] `rule_matching` #