HTTP Access Limit Violation

Last updated on:

Applies to: Log360Log360 Cloud

About the rule

Rule Type

Standard

Rule Description

This rule detects when HTTP requests exceed access limits (e.g., URL access frequency, concurrent sessions).

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "HTTP Access Limit Violation" select Action1.HOSTNAME,Action1.IDS_NAME,Action1.EVENTID,Action1.DEST_IP,Action1.DEST_PORT,Action1.MESSAGE,Action1.SOURCE_IP,Action1.STATUS

Detection

Execution Mode

realtime

Log Sources

Fortinet