increase leakspeed on 403 rule [ci skip]

This commit is contained in:
Viktor Barzin 2025-12-29 22:07:19 +00:00
parent d37c693a94
commit b1486c1de7

View file

@ -35,7 +35,7 @@ resource "kubernetes_config_map" "crowdsec_custom_scenarios" {
description: "Detect IPs triggering too many HTTP 403s in NGINX ingress logs"
filter: "evt.Meta.log_type == 'http_access-log' && evt.Parsed.status == '403'"
groupby: "evt.Meta.source_ip"
leakspeed: "30s"
leakspeed: "2s"
capacity: 10
blackhole: 5m
labels: