Skip to content

Commit a486ba7

Browse files
author
jdv
committed
rephrased log processor classificaiton justificaiton
1 parent 3042135 commit a486ba7

File tree

2 files changed

+7
-7
lines changed

2 files changed

+7
-7
lines changed

crowdsec-docs/docs/getting_started/intro.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@ See [Version Matrix](/getting_started/versions_matrix.md) for a list of supporte
1919
## Why is my Security Engine classed as a "log processor" within the console?
2020

2121
The `Security Engine` comes compiled with a number of core components that can be enabled or disabled at runtime.
22+
One of these features is called the **"LAPI"** (Local API) and other one is the **"log processor"**.
2223

23-
One of these features is called the "LAPI" (Local API). If this feature is disabled at runtime, the Security Engine will be classed as a "log processor" within the console as it will only be able to process logs and forward the alerts to the local API you define in the configuration.
24+
A single `Security Engine` can run in autonomous mode where it handles reading logs (or requests) and processing them as well as handling alerts and other task on its own **"LAPI"**.
25+
For **scaling** or **perimeter segmentation** reasons you might want to have a distributed setup. In that case multiple `Security Engines` process logs and send alerts to a central one's **"LAPI"**. In that distributed case you'll see **"log processors"** attached to the central `Security Engines` in the console UI.
2426

2527
Read more about the [Log Processor](log_processor/intro.mdx) and the [Local API](local_api/intro.md).
26-
27-
Most commonly this is the case when you are running in a distributed setup, where you have a central server that is running the LAPI and a number of remote servers that are running the "Log processors".

crowdsec-docs/unversioned/integrations/genericvendor.mdx

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,23 @@
11
---
22
id: genericfirewall
3-
title: Generic Firewall
3+
title: Generic Firewall (Raw IP-list)
44
---
55
import ThemedImage from "@theme/ThemedImage";
66
import useBaseUrl from "@docusaurus/useBaseUrl";
77

8-
The CrowdSec Generic Firewall integration allows you to block malicious IPs in your Firewall. This guide will walk you through the steps to integrate CrowdSec blocklists with your Firewall.
8+
The CrowdSec Raw IP List (or Generic Firewall) integration allows you to block malicious IPs in your Firewall. This guide will walk you through the steps to integrate CrowdSec blocklists with your Firewall.
99

1010
### Prerequisites
1111

12-
Before you begin, please ensure your Generic Firewall device supports ingesting blocklists. If you are unsure, please refer to the Generic Firewall documentation or contact Generic Firewall support.
12+
Before you begin, please ensure your device supports ingesting the raw IP format (one ip per line).
1313

1414
### Steps
1515

1616
We will presume you followed the [Getting Started](integrations/intro.mdx) guide and have created an account on the CrowdSec Console.
1717

1818
Once you are authenticated, you can proceed to the Blocklist tab located on the top menu bar, from there you can select the Integrations sub menu.
1919

20-
Once the page has loaded, you can click the "Connect" button under the Generic Firewall logo.
20+
Once the page has loaded, you can click the "Connect" button under the Raw IP List (or Generic Firewall) logo.
2121

2222
<ThemedImage
2323
alt="Generic Firewall Integration Card"

0 commit comments

Comments
 (0)