Thibault "bui" Koechlin
Thibault "bui" Koechlin
cf. https://github.com/crowdsecurity/hub/issues/405
(note: this is a cross-post with https://discourse.crowdsec.net/t/request-for-comments-parsers-scenarios-customization-in-the-crowdsec-agent/129) Preface ------- Currently, if a CrowdSec user wants to modify a parser or a scenario, he has no choice but to edit the...
When scenarios/parsers are using `data:source_url` directives, it would be nice to be able to specify a "refresh" period (ie. "24h", "30d" etc.) `cscli hub upgrade` (and similar sub-commands) would then...
### What would you like to be added? I would like a `cscli` command, such as `cscli capi status` or `cscli console status` to let me know if : -...
Hello, As per the discussion below and our slack chat, I open an issue to track this topic, ## What we want to do We are looking to integrate Coraza...
### What would you like to be added? We currently expose a [`CTIHelper`](https://doc.crowdsec.net/docs/next/expr/cti_helpers) expr method, but it has a few shortcoming: 1. We might make its usage easier than currently...
As suggested on [gitter by a user](https://gitter.im/crowdsec-project/community?at=5fae63efd37a1a13d6a396d1), we should/could : - log when a bucket is instanciated (with the originating IP) - log when a bucket underflows (with the originating...
### What would you like to be added? not 100% sure it's related to [this issue](https://github.com/crowdsecurity/crowdsec/issues/2683) but still: The DNS enricher method](https://app.crowdsec.net/hub/author/crowdsecurity/configurations/rdns) doesn't support cache. It might have some serious...
### What happened? When testing the waf and found some requests triggering a crash of crowdsec, the `cscli hubtest run` command displays the output of crowdsec **without** the stacktrace or...