Custom scenario not triggering neither alert nor decision - CrowdSec

CrowdSec•13mo ago•

106 replies

Custom scenario not triggering neither alert nor decision

Hello !

I installed Crowdsec with helm on my Google Kubernetes Cluster with this chart version : 0.14.1

I also deployed my custom parser, custom scenario (named

crowdsecurity/compte_xxx_login_error

crowdsecurity/compte_xxx_login_error

) and custom profile.

When I run

cscli metrics

cscli metrics

command in one of the agent pod, I find out this information :

Scenario Metrics:
Scenario                                   │ Current Count │ Overflows │ Instantiated │ Poured │ Expired
crowdsecurity/compte_xxx_login_error │ 1             │ 197       │ 198          │ 395    │ -

Scenario Metrics:
Scenario                                   │ Current Count │ Overflows │ Instantiated │ Poured │ Expired
crowdsecurity/compte_xxx_login_error │ 1             │ 197       │ 198          │ 395    │ -

What does that line mean?

I guess my custom scenario was hit once. SO I don't understand why there is no triggered alert as well as no decision created by lapi.

Could you help me please ?
Kind regards,

Mathis