Skip to content

Configurable filtering #1

@toddinpal

Description

@toddinpal

Currently the decision whether something is abusive or not is by looking for specific strings in the syslog message and if finding them, extracting the necessary information from the syslog message and reporting it. I suspect the easiest method to implement would be to allow entering a regex expression that if matches transforms the syslog message into an abuse report. So basically use a regex replacement string. Should probably allow including a way to specify what types of abuse, i.e., the AbuseIPDB categories, that the string matched.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions