2026-11-09T06:13:17Z INF event event="PR10 Response Trigger Talon Active Canary" output="2026-11-09T06:13:17.976187670+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" priority=Notice source=syscall trace_id=44e6c22d2eb296053715c1ca4c2e9576 2026-11-09T06:13:19Z INF event event="PR10 Response Trigger Talon Active Canary" output="2026-11-09T06:13:19.297158870+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" priority=Notice source=syscall trace_id=26860cefa45d1a179b8b40e5f973dc9b 2026-11-09T06:13:19Z INF event event="Custom T1059.004 Non Interactive Shell" output="2026-11-09T06:13:19.297158870+0000: Warning CUSTOM T1059.004 - Shell non interactif (user=root command=sh -c echo PR10_TALON_CANARY >/dev/null parent= container=cible1 pod=cible1)" priority=Warning source=syscall trace_id=863ff710eda67baffc65548748120b9e 2026-11-09T06:13:19Z INF nats result="new leader detected '127.0.0.1'" 2026-11-09T06:13:20Z INF event event="Custom T1059.004 Non Interactive Shell" output="2026-11-09T06:13:20.533795785+0000: Warning CUSTOM T1059.004 - Shell non interactif (user=root command=sh -c echo PR10_TALON_CANARY >/dev/null parent=runc container=cible1 pod=cible1)" priority=Warning source=syscall trace_id=8534d8752e75ef3df1b5f523a99e9e41 2026-11-09T06:13:20Z INF event event="PR10 Response Trigger Talon Active Canary" output="2026-11-09T06:13:20.533795785+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" priority=Notice source=syscall trace_id=21bb4d4c31171a1c67c3e1f15d10dc86 2026-11-09T06:13:20Z INF match event="PR10 Response Trigger Talon Active Canary" output="2026-11-09T06:13:20.533795785+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" priority=Notice rule="PR10 Active Canary Playbook" source=syscall trace_id=21bb4d4c31171a1c67c3e1f15d10dc86 2026-11-09T06:13:20Z INF action action="PR10 Active Canary Marker" actionner=kubernetes:label event="2026-11-09T06:13:20.533795785+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" rule="PR10 Active Canary Playbook" status=in_progress trace_id=21bb4d4c31171a1c67c3e1f15d10dc86 2026-11-09T06:13:20Z INF action action="PR10 Active Canary Marker" actionner=kubernetes:label event="2026-11-09T06:13:20.533795785+0000: Notice PR10 RESPONSE CANARY (pod=cible1 namespace=default processus=sh commande=sh -c echo PR10_TALON_CANARY >/dev/null)" namespace=default output="the pod 'cible1' in the namespace 'default' has been labeled" pod=cible1 rule="PR10 Active Canary Playbook" status=success trace_id=21bb4d4c31171a1c67c3e1f15d10dc86 2026-11-09T06:13:20Z INF notification action="PR10 Active Canary Marker" actionner=kubernetes:label notifier=k8sevents rule="PR10 Active Canary Playbook" stage=action status=success trace_id=21bb4d4c31171a1c67c3e1f15d10dc86 2026-11-09T06:12:59Z INF init category=kubernetes status=success 2026-11-09T06:12:59Z INF init result="4 rule(s) has/have been successfully loaded" 2026-11-09T06:12:59Z INF init result="watch of rules enabled" 2026-11-09T06:12:59Z INF http result="Falco Talon is up and listening on 0.0.0.0:2803" 2026-11-09T06:12:59Z INF nats result="new leader detected '192.168.0.142'" 2026-11-09T06:13:20Z INF nats result="new leader detected '192.168.0.144'"