crowdsec/config/profiles.yaml

name: default_ip_remediation
#debug: true
filters:
 - Alert.Remediation == true && Alert.GetScope() == "Ip"
decisions:
 - type: ban
   duration: 1h
on_success: break
local api (#482) Co-authored-by: AlteredCoder Co-authored-by: erenJag 2020-11-30 09:37:17 +00:00			`name: default_ip_remediation`
			`#debug: true`
			`filters:`
			`- Alert.Remediation == true && Alert.GetScope() == "Ip"`
			`decisions:`
			`- type: ban`
			`duration: 1h`
			`on_success: break`