We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
When a scenario fails to be loaded (ie. because the filter is incorrect), the error message could make the incriminated scenario more obvious.
Currenty:
time="29-05-2020 13:19:54" level=error msg="Failed to load bucket : invalid filter 'evt.Meta.log_type in ['http_access-log', 'http_error-log'] && any(File('sqli_probe_patterns.txt'), {Upper(evt.Parsed.http_args) contains Upper(#)})' in /etc/crowdsec/config/scenarios/http-sqli-probing.yaml : unknown func Upper (1:101)\n | evt.Meta.log_type in ['http_access-log', 'http_error-log'] && any(File('sqli_probe_patterns.txt'), {Upper(evt.Parsed.http_args) contains Upper(#)})\n | ....................................................................................................^" time="29-05-2020 13:19:54" level=fatal msg="Scenario loading failed : loadBucket failed : invalid filter 'evt.Meta.log_type in ['http_access-log', 'http_error-log'] && any(File('sqli_probe_patterns.txt'), {Upper(evt.Parsed.http_args) contains Upper(#)})' in /etc/crowdsec/config/scenarios/http-sqli-probing.yaml : unknown func Upper (1:101)\n | evt.Meta.log_type in ['http_access-log', 'http_error-log'] && any(File('sqli_probe_patterns.txt'), {Upper(evt.Parsed.http_args) contains Upper(#)})\n | ....................................................................................................^"
Mentioning directly that "the scenario crowdsecurity/http-sqli-probing failed to be load because ..." would make user's life easier !
crowdsecurity/http-sqli-probing
The text was updated successfully, but these errors were encountered:
fix #47 : more explicit error message when we can't load bucket
f27ae24
fix #47
a4b9a77
fix #47 #35 (#49)
f2e38b0
4087d05
Successfully merging a pull request may close this issue.
When a scenario fails to be loaded (ie. because the filter is incorrect), the error message could make the incriminated scenario more obvious.
Currenty:
Mentioning directly that "the scenario
crowdsecurity/http-sqli-probing
failed to be load because ..." would make user's life easier !The text was updated successfully, but these errors were encountered: