Skip to content

Commit

Permalink
Add on_error in CTI example so it easier to spot
Browse files Browse the repository at this point in the history
  • Loading branch information
LaurenceJJones committed Oct 11, 2023
1 parent 0f7800e commit 4e33980
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion crowdsec-docs/docs/profiles/cti_profile.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,10 +39,11 @@ decisions:
on_success: break
```
A key piece of profile to point out is the `on_error` directive. It is set to `continue` to ensure that the alert will continue to be evaluated even if your API key is rate limited.

You could also use the background noise within the `duration_expr` to make the ban duration proportional to the background noise score:

```yaml
---
name: bn_score
on_error: continue
filters:
Expand Down

0 comments on commit 4e33980

Please sign in to comment.