Nginx - Generic Protection

Nginx collection

A collection to defend nginx against common attacks :

• nginx parser (support also ingress nginx controller default log_format)
• base http scenarios (crawl, 404 scan, bf)

Acquisition template

Example acquisition for this collection :

1filenames:
2  - /var/log/nginx/*.log
3labels:
4  type: nginx

notes :

• If you are using syslog, set type to syslog instead
• Depending on your distribution/OS, paths to log files might change
• Only relevant if you are manually installing collection