# Blog: Introducing Falco 0.38.0

DevFeed: [Blog: Introducing Falco 0.38.0](<https://devfeed.tech/articles/blog-introducing-falco-0-38-0-32484.md>)

Original publisher: [Read original article](<https://falco.org/blog/falco-0-38-0/>)

Published: 2024-05-30T00:00:00Z

Content type: release

Language: en

Sources: [Falco - Falco](<https://devfeed.tech/sources/falco-falco.md>), [Falco - The Falco blog](<https://devfeed.tech/sources/falco-the-falco-blog.md>)

Topics: [Linux Kernel](<https://devfeed.tech/topics/linux-kernel.md>), [eBPF](<https://devfeed.tech/topics/ebpf.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Prometheus](<https://devfeed.tech/topics/prometheus.md>), [Maintainers](<https://devfeed.tech/topics/maintainers.md>)

Tags: [announce](<https://devfeed.tech/tags/announce.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [ebpf](<https://devfeed.tech/tags/ebpf.md>), [falco](<https://devfeed.tech/tags/falco.md>), [features](<https://devfeed.tech/tags/features.md>), [linux](<https://devfeed.tech/tags/linux.md>), [maintainers](<https://devfeed.tech/tags/maintainers.md>), [plugin](<https://devfeed.tech/tags/plugin.md>), [prometheus](<https://devfeed.tech/tags/prometheus.md>), [release](<https://devfeed.tech/tags/release.md>)

## AI overview

Falco 0.38.0 is released with changes to driver installation and selection, configuration file splitting, rule selection, field transformations, Prometheus metrics, and the Plugin API. The release also includes breaking changes and improved compatibility with Linux kernels through driver-loading and eBPF updates.

## Source excerpt

Dear Falco Community, today we are happy to announce the release of Falco 0.38.0! This is the first Falco release since its graduation within the CNCF, and, as usual, brings many improvements and features alongside some pretty big changes in its configuration mechanism. This release brings an easier to use mechanism to install and configure your drivers, new rule language features, better support for Falco metrics and many more improvements. During this release cycle, we merged more than 100 PRs on Falco and more than 180 PRs for libs and drivers, version 0.17.0 and version 7.2.0 respectively. Thank you to our maintainers and contributors, as this would not happen without your support and dedication! To learn all about these changes, read on! What's new? TL;DR Key features: New capabilities in falcoctl to automatically select the best driver for your system and make it easier to install The Falco configuration file can now be split into multiple files to make it more manageable Rule selection from configuration file or command line Field transformers and value comparison Prometheus metrics support Plugin API improvements This release also comes with breaking changes that you should be aware of before upgrading. Major features and improvements The 0.38.0 release contains a number of feature and UX improvements, here are list of some of the key new capabilities. Driver loader magic ✨ If we could pick the most common issue that we've heard from adopters and we experienced first hand is the fact that sometimes we all struggle with installing and upgrading Falco drivers. The Falco team has been tirelessly working for years to improve the installation experience and Linux kernel compatibility with massive changes such as the introduction of the new CO-RE eBPF probe and most recently the complete rewrite of our driver loading component, integrated in falcoctl. With this new version of falcoctl, integrated in Falco 0.38.0, our loading tool will automatically detect your sys