root
29 lines
934 B
INI
29 lines
934 B
INI
[crowdsec]
|
|
|
|
spoe-agent crowdsec-agent
|
|
messages crowdsec-tcp
|
|
groups crowdsec-http-body crowdsec-http-no-body
|
|
option var-prefix crowdsec
|
|
option set-on-error error
|
|
timeout hello 200ms
|
|
timeout idle 55s
|
|
timeout processing 500ms
|
|
use-backend crowdsec-spoa
|
|
log global
|
|
|
|
spoe-message crowdsec-tcp
|
|
args id=unique-id src-ip=src src-port=src_port
|
|
event on-client-session
|
|
|
|
spoe-message crowdsec-http-body
|
|
args remediation=var(txn.crowdsec.remediation) id=unique-id method=method path=path query=query version=req.ver headers=req.hdrs body=req.body url=url ssl=ssl_fc src-ip=src src-port=src_port
|
|
|
|
spoe-message crowdsec-http-no-body
|
|
args remediation=var(txn.crowdsec.remediation) id=unique-id method=method path=path query=query version=req.ver headers=req.hdrs url=url ssl=ssl_fc src-ip=src src-port=src_port
|
|
|
|
spoe-group crowdsec-http-body
|
|
messages crowdsec-http-body
|
|
|
|
spoe-group crowdsec-http-no-body
|
|
messages crowdsec-http-no-body
|