question about cscli metrics - CrowdSec