crowdsec/pkg/leakybucket/tests/conditional-bucket/bucket.yaml
2023-01-06 09:26:16 +01:00

11 lines
322 B
YAML

type: conditional
name: test/conditional
#debug: true
description: "conditional bucket"
filter: "evt.Meta.log_type == 'http_access-log'"
groupby: evt.Meta.source_ip
condition: any(queue.Queue, {.Meta.http_path == "/"}) and any(queue.Queue, {.Meta.http_path == "/foo"})
leakspeed: 1s
capacity: -1
labels:
type: overflow_1