increase leakspeed on 403 rule [ci skip]
This commit is contained in:
parent
d37c693a94
commit
b1486c1de7
1 changed files with 1 additions and 1 deletions
|
|
@ -35,7 +35,7 @@ resource "kubernetes_config_map" "crowdsec_custom_scenarios" {
|
|||
description: "Detect IPs triggering too many HTTP 403s in NGINX ingress logs"
|
||||
filter: "evt.Meta.log_type == 'http_access-log' && evt.Parsed.status == '403'"
|
||||
groupby: "evt.Meta.source_ip"
|
||||
leakspeed: "30s"
|
||||
leakspeed: "2s"
|
||||
capacity: 10
|
||||
blackhole: 5m
|
||||
labels:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue