Différences

Ci-dessous, les différences entre deux révisions de la page.

--- informatique:securite:crowdsec [07/05/2023 16:07] – [Tips & tricks] cyrille
+++ informatique:securite:crowdsec [06/10/2023 21:56] (Version actuelle) – [Alternatives] cyrille
@@ Ligne 6: / Ligne 6: @@
   * [[https://docs.crowdsec.net/docs/scenarios|scenarios]]
   * [[https://docs.crowdsec.net/docs/user_guides/decisions_mgmt/|Decisions management]]
+"Average Malevolent Duration (In Days) of Most Reported AS" page 11 sur [[https://majorityreport.crowdsec.net/hubfs/CrowdSec_Majority_Report.pdf|CrowdSec Majority Report]]
 ===== Installer crowdsec =====
@@ Ligne 19: / Ligne 21: @@
 Pour relancer la configuration : <code>/usr/share/crowdsec/wizard.sh -c</code>
-pour la configuration utiliser le fichier ''/etc/crowdsec/config.yaml.local''
+pour la configuration utiliser le fichier ''/etc/crowdsec/config.yaml.local''. Par exemple désactiver l'agent [[/informatique/system_admin/Prometheus|Prometheus]].
 <code yaml>
 #
@@ Ligne 54: / Ligne 56: @@
 sudo cscli decisions list
 </code>
+==== Alternatives ====
+Aukfood vous guide pour [[https://www.aukfood.fr/automatiser-linstallation-et-la-configuration-de-crowdsec-avec-ansible/|automatiser l'installation de Crowdsec]] avec [[/informatique/ansible|Ansible]].
 ===== Quelques commandes =====
@@ Ligne 97: / Ligne 103: @@
 sudo cscli hub upgrade
 </code>
 ===== Tips & tricks =====
@@ Ligne 102: / Ligne 109: @@
 ==== Vocabulaire ====
-Scenario
+[[https://docs.crowdsec.net/docs/scenarios/format/|Scenario format]]:
-  * capacity: the number of events in the bucket before it overflows.
+  * **capacity**: the number of events in the bucket before it overflows.
-  * leakspeed: A duration that represent how often an event will be leaking from the bucket.
+  * **leakspeed**: A duration that represent how often an event will be leaking from the bucket.
-  * blackhole: A duration for which a bucket will be "silenced" after overflowing. This is intended to limit / avoid spam of buckets that might be very rapidly triggered. The blackhole only applies to the individual bucket.
+  * **blackhole**: A duration for which a bucket will be "silenced" after overflowing. This is intended to limit / avoid spam of buckets that might be very rapidly triggered. The blackhole only applies to the individual bucket.