Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FR > Update Cloudflare Dashboard to reflect current security fields #2562

Open
alaiavee opened this issue Sep 19, 2024 · 0 comments
Open

FR > Update Cloudflare Dashboard to reflect current security fields #2562

alaiavee opened this issue Sep 19, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@alaiavee
Copy link

alaiavee commented Sep 19, 2024

Summary

Cloudflare updated the security fields for Logs back on 2023-02-01:
https://developers.cloudflare.com/logs/reference/change-notices/2023-02-01-security-fields-updates/

The following fields that are used in the Cloudflare quickstart dashboard (LINK) have been renamed or deprecated:

Replaced/Updated fields:
WAFRuleMessage updated to SecurityRuleDescription
WAFRuleID updated to SecurityRuleID
WAFAction updated to SecurityAction

Deprecated fields:
WAFProfile

Desired Behavior

The Security section of the dashboard needs to be updated to use the new field names and remove references to the deprecated WAFProfile field.

Right now there are no results due to the dashboard using the old field names. Expected behavior is for all the threats charts to show data.

Possible Solution

Perhaps replace the conditions for WAFProfile:
WHERE WAFProfile IN ('low','med','high')

With the following (or something with similar effect):
WHERE string(tuple(SecurityRuleID, SecurityAction)) != '["",""]' (enforcing the presence of SecurityRuleID and SecurityAction).

Will also need to update queries to use the new field names for the following:
WAFRuleMessage updated to SecurityRuleDescription
WAFRuleID updated to SecurityRuleID
WAFAction updated to SecurityAction

@alaiavee alaiavee added the enhancement New feature or request label Sep 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant