cscli collections install crowdsecurity/http-extended-context
This collection add more HTTP related context.
It is not installed by default, as some values could be considered sensitive (such as the target FQDN of an attack).