Appsec events is missing some data to easily filter them in profiles

[blotus]

It's a bit awkward to filter an appsec event in the profiles (to send a notif for example):

• There's no Type or similar in an alert: this only exists in the events
• Events are not populated in an appsec alert (this can make sense, as we don't really have an event)
• Even if events were populated, evt.GetType() does not handle the APPSEC type

Currently, the workaround is to filter on the message, but this seems very fragile:

Alert.Message contains "AppSec block:"

[github-actions]

@blotus: Thanks for opening an issue, it is currently awaiting triage.

In the meantime, you can:

1. Check Crowdsec Documentation to see if your issue can be self resolved.
2. You can also join our Discord.
3. Check Releases to make sure your agent is on the latest version.

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[github-actions]

@blotus: There are no 'kind' label on this issue. You need a 'kind' label to start the triage process.

• /kind feature
• /kind enhancement
• /kind refactoring
• /kind bug
• /kind packaging

Details

I am a bot created to help the crowdsecurity developers manage community feedback and contributions. You can check out my manifest file to understand my behavior and what I can do. If you want to use this for your project, you can check out the BirthdayResearch/oss-governance-bot repository.

[blotus]

/kind bug