You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"description": "Legitimate customers having low score",
79
-
"expression": "(cf.bot_management.score le 46 and ip.geoip.asnum eq 132892 and http.host eq \"api-discovery.theburritobot.com\" and cf.bot_management.ja3_hash eq \"3fed133de60c35724739b913924b6c24\")",
79
+
"expression": "(cf.bot_management.score le 46 and ip.src.asnum eq 132892 and http.host eq \"api-discovery.theburritobot.com\" and cf.bot_management.ja3_hash eq \"3fed133de60c35724739b913924b6c24\")",
"description": "Legitimate customers having low score",
122
-
"expression": "(cf.bot_management.score le 46 and ip.geoip.asnum eq 132892 and http.host eq \"api-discovery.theburritobot.com\" and cf.bot_management.ja3_hash eq \"3fed133de60c35724739b913924b6c24\")",
122
+
"expression": "(cf.bot_management.score le 46 and ip.src.asnum eq 132892 and http.host eq \"api-discovery.theburritobot.com\" and cf.bot_management.ja3_hash eq \"3fed133de60c35724739b913924b6c24\")",
|`type`| string | The feedback report type. |`false_positive`|
157
157
|`description`| string | The feedback report description with more details on the issue. | Legitimate customers having low scores. |
158
-
|`expression`| string | The wirefilter expression matching reported requests. |`(cf.bot_management.score le 46 and ip.geoip.asnum eq 132892 and http.host eq "app.example.com" and cf.bot_management.ja3_hash eq "3fed133de60c35724739b913924b6c24")`|
158
+
|`expression`| string | The wirefilter expression matching reported requests. |`(cf.bot_management.score le 46 and ip.src.asnum eq 132892 and http.host eq "app.example.com" and cf.bot_management.ja3_hash eq "3fed133de60c35724739b913924b6c24")`|
159
159
|`first_request_seen_at`| string | The time range start when the first request has been seen, RFC 3339 format. |`2022-08-01T00:00:00Z`|
160
160
|`last_request_seen_at`| string | The time range end when the last request has been seen, RFC 3339 format. |`2022-08-10T00:00:00Z`|
161
161
|`requests`| integer | The total number of reported requests. |`100`|
|`http.host`| string | This represents the hostname used in the full request URI. |
210
210
|`http.request.uri.path`| string | This represents the URI path of the request. |
211
211
|`http.user_agent`| string | This represents the HTTP user agent which is a request header that contains a characteristic string to allow identification of the client operating system and web browser. |
212
-
|`ip.geoip.asnum`| integer | This represents the 16- or 32-bit integer representing the Autonomous System (AS) number associated with client IP address. |
213
-
|`ip.geoip.country`| string | This represents the 2-letter country code in ISO 3166-1 Alpha 2 format. |
212
+
|`ip.src.asnum`| integer | This represents the 16- or 32-bit integer representing the Autonomous System (AS) number associated with client IP address. |
213
+
|`ip.src.country`| string | This represents the 2-letter country code in ISO 3166-1 Alpha 2 format. |
214
214
|`ip.src`| string | The source address of the IP. |
0 commit comments