diff --git a/userspace/engine/CMakeLists.txt b/userspace/engine/CMakeLists.txt
index 96ec10a7dc2..2f6a0c31032 100644
--- a/userspace/engine/CMakeLists.txt
+++ b/userspace/engine/CMakeLists.txt
@@ -4,7 +4,7 @@ include_directories("${PROJECT_SOURCE_DIR}/../sysdig/userspace/libsinsp")
 include_directories("${PROJECT_BINARY_DIR}/userspace/engine")
 include_directories("${LUAJIT_INCLUDE}")
 
-add_library(falco_engine STATIC rules.cpp falco_common.cpp falco_engine.cpp formats.cpp)
+add_library(falco_engine STATIC rules.cpp falco_common.cpp falco_engine.cpp token_bucket.cpp formats.cpp)
 
 target_include_directories(falco_engine PUBLIC
   "${LUAJIT_INCLUDE}")
diff --git a/userspace/falco/token_bucket.cpp b/userspace/engine/token_bucket.cpp
similarity index 100%
rename from userspace/falco/token_bucket.cpp
rename to userspace/engine/token_bucket.cpp
diff --git a/userspace/falco/token_bucket.h b/userspace/engine/token_bucket.h
similarity index 100%
rename from userspace/falco/token_bucket.h
rename to userspace/engine/token_bucket.h
diff --git a/userspace/falco/CMakeLists.txt b/userspace/falco/CMakeLists.txt
index a45164f3f32..9314d051959 100644
--- a/userspace/falco/CMakeLists.txt
+++ b/userspace/falco/CMakeLists.txt
@@ -9,7 +9,7 @@ include_directories("${CURL_INCLUDE_DIR}")
 include_directories("${YAMLCPP_INCLUDE_DIR}")
 include_directories("${DRAIOS_DEPENDENCIES_DIR}/yaml-${DRAIOS_YAML_VERSION}/target/include")
 
-add_executable(falco configuration.cpp logger.cpp token_bucket.cpp falco_outputs.cpp statsfilewriter.cpp falco.cpp)
+add_executable(falco configuration.cpp logger.cpp falco_outputs.cpp statsfilewriter.cpp falco.cpp)
 
 target_link_libraries(falco falco_engine sinsp)
 target_link_libraries(falco