I have configured a nginx log acquisition and I would like to add a custom scenario that ban the client ip if it was blocked by nginx deny directive. This kind of logs seems to have request identifier
*16
*16
and error message
access forbidden by rule
access forbidden by rule
, can someone help me building a scenario yaml? thank you so much