Hello , on Falco Lab01 (Q15) , i have an issue , i applied a change on the rule by adding it into the local rule and tested that and it logs as requested but the Quiz Portal it show that "Task not completed " ( i was not able as well to hot-reload falco with : kill -1 $(cat /var/run/falco.pid ) , so i just restarted the falco unit via systemctl , is there any issues by doing so ! )
Same question here. What’s the right way of restating Falco after a change is made @Mumshad Mannambeth @Vijin Palazhi
you can reload the regular way with systemctl as well. from an exam point of view that should not affect the outcome.
use the hot reload if its an option.