Skip to content

Fix AWF WAF rule to match event action#8111

Merged
vikman90 merged 1 commit into4.2from
7947_fix_aws_rule
Apr 6, 2021
Merged

Fix AWF WAF rule to match event action#8111
vikman90 merged 1 commit into4.2from
7947_fix_aws_rule

Conversation

@TomasTurina
Copy link
Member

Related issue
#7947

Description

A problem found in AWS WAF rules is solved in this PR.

Instead of using match to identify the type of log (block or allow), not it is used the aws.action field present in the event decoded.

Tests

  • Compilation without warnings in every supported platform
    • Linux
  • Source installation
  • Package installation
  • Source upgrade
  • Package upgrade
  • Review logs syntax and correct language

@TomasTurina TomasTurina requested a review from vikman90 April 5, 2021 20:08
@TomasTurina TomasTurina self-assigned this Apr 5, 2021
@TomasTurina TomasTurina linked an issue Apr 5, 2021 that may be closed by this pull request
@vikman90 vikman90 merged commit 3ef944a into 4.2 Apr 6, 2021
@vikman90 vikman90 deleted the 7947_fix_aws_rule branch April 6, 2021 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

AWS WAF default rules decoding issue

2 participants