Mandy Singh

Thanks for your response. Will probably just use big blocks stacked over one another for more real estate (for now) :-)

This is one line in the log where the WAF has blocked a bad request. ``` { "timestamp": 1626141957554, "formatVersion": 1, "webaclId": "arn:aws:wafv2:us-west-2:912345678905:regional/webacl/WebACL/12fa5cbd-4fdc-4c3e-94cd-8e123f8fd123", "terminatingRuleId": "AWS-AWSManagedRulesCommonRuleSet", "terminatingRuleType": "MANAGED_RULE_GROUP", "action": "BLOCK", "terminatingRuleMatchDetails":...

This is an allowed request ``` { "timestamp": 1626141961811, "formatVersion": 1, "webaclId": "arn:aws:wafv2:us-west-2: 912345678905:regional/webacl/WebACL/12fa5cbd-4fdc-4c3e-94cd-8e123f8fd123", "terminatingRuleId": "Default_Action", "terminatingRuleType": "REGULAR", "action": "ALLOW", "terminatingRuleMatchDetails": [], "httpSourceName": "ALB", "httpSourceId": "912345678905-app/premium/fd1f12faadfc1d12", "ruleGroupList": [{ "ruleGroupId": "AWS#AWSManagedRulesCommonRuleSet",...

Thank you for getting back. I tried /usr/local/bin/goaccess aws-waf-log.txt goaccess access.log --log-format='{ "timestamp": "%x", "action": "%e", "httpRequest": { "clientIp": "%h", "headers": [{"name": "Host", "value": "%v"}, {"name":"User-Agent", "value": "%u"}], "uri": "%U",...

Just updated to 1.5.1 ( I was on 1.4 ). Code provided by you is working great! I am able to see the block vs allow percentages which is helpful....

No, I am not talking about 404s. So, cloudfront is a CDN that helps serving your files quickly from caches around the world. But, it uses the headers of the...

Hey @allinurl - any thoughts on this one ?

Are you referring to the attached image ? If yes, then I have been using it. I think I pointed this out to you in a previous bug https://github.com/allinurl/goaccess/issues/1830 Option...

That is correct. But, more than hits, want to filter through "miss". That gives us information on which urls don't have proper caching headers. Hits are hits :-)

Okay I was finally able to find it from iosninja.io Now, just trying to figure out how to decrypt the msgstore.db.crypt12 file.