elastic / integrations

Elastic Integrations
https://www.elastic.co/integrations
Other
194 stars 421 forks source link

[Cloudflare Logpush] Support the new 'WAF*AttackScore' HTTP Request log fields #9108

Closed chemamartinez closed 4 months ago

chemamartinez commented 7 months ago

Cloudflare has added 4 new WAF (Web Application Firewall) AttackScore fields to their HTTP Request logs that shares the generated score produced by their WAF detection module. The 4 new fields are:

Comparing the fieldset reference against the mapped fields in the Cloudflare Logpush integration, we are also missing the following fields:

elasticmachine commented 7 months ago

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)