crowdsec/pkg/leakybucket/tests/simple-leaky-underflow/bucket.yaml
2020-08-05 11:39:54 +02:00

13 lines
221 B
YAML

# ssh bruteforce
type: leaky
debug: true
name: test/simple-leaky
description: "Simple leaky"
filter: "evt.Line.Labels.type =='testlog'"
leakspeed: "0.5s"
capacity: 2
groupby: evt.Meta.source_ip
labels:
type: overflow_1