Bot Manager examples

Copy a ready-to-use configuration for a Bot Manager instance, the rule that runs it, and the query that reads what it scored.

Last updated

View as Markdown Agent setup

Copy any of these snippets and change the names and ids for your own account. Each one is the smallest complete form of a single object the rest of the Bot Manager documentation describes at length: the arguments an instance runs on, the Rules Engine rule that hands it a request, and the query that returns what it scored. These are configurations to copy rather than a walkthrough, so take them in any order. The Bot Manager quickstart walks the same objects once, in order, for a reader who has never built them.

An instance scores nothing on its own, and a rule has to name it first. The run_function behavior that does the naming takes the id of the instance, never the id of the installed function, so the instance exists before the rule can be written. Three of these four snippets carry Azion Console, Azion CLI, and API panels. Reading the report log carries the API panel alone.

An instance on a firewall

An instance that scores without refusing

Set action to allow and raise internal_logs, so every request is scored, logged, and served.

An instance that refuses above the threshold

Set action to deny on the same object, and read what a request receives once its score reaches the threshold.

The rule that runs it

A rule that runs the instance on every request

Build the Rules Engine rule whose Run Function behavior hands every request a firewall receives to one instance.

Reading what it scored

Read the report log for one instance

Query the functionConsoleEvents dataset for the lines one instance wrote, and read the values each line carries.

Bot Manager quickstart

Build the same objects once, in order, in the interface you prefer.

Bot scoring

Where the score comes from, and what the function does with it at the threshold.

Arguments

Every argument an instance accepts, with its type, its default, and the values it takes.

Logs

Every field a report line carries, and what each one holds.

Firewall best practices

The order to apply these configurations in, and how long to observe before you raise the action.

Troubleshoot Firewall

What to read when a snippet runs and the result is not what you expected.