rules_file: /etc/falco_rules.yaml
json_output: false

log_stderr: true
log_syslog: true

syslog_output:
  enabled: true

file_output:
  enabled: true
  filename: ./events.txt

stdout_output:
  enabled: false


rules_file: /etc/falco_rules.yaml
json_output: false

log_stderr: false
log_syslog: true

syslog_output:
  enabled: true

file_output:
  enabled: false
  filename: ./events.txt

stdout_output:
  enabled: false


Change output options in file as well.
Change output options in file as well.

Also change output options in falco config to reflect default behavior
of being started via a service.
