Book IndexHideShow
Back to topic

Cloud Application Security

Rule Filter Parameters

Rule Filter Parameters

The following parameters are available for use when defining rules.

Note: You define rule filters in the Add Rule page. For details, see Create Rules.

To define the rule filter, you can select filter options available in the UI, or add filters directly using the native syntax. For details on the correct syntax, see the Syntax Guide.

For examples of rules you can use to address some common use cases, see Security Rule Use Case Examples and Delivery Rule Use Case Examples.

There are three categories of filter parameters:

Client Parameters Provide information about the connecting client. For example, Client IP or Client ID.
Request Parameters Provide information about the current HTTP request. For example, Query String or Header Value.

Counter Parameters

Provide a running count of the number of actions performed. For example, Attack Count or Page Hits Counter.

Client Parameters

ASN

The client IP Autonomous System Number (ASN).

Example: ASN == 71

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

City

The name of the city where the client sending the request is located.

Example: City == "Amsterdam"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Client Certificate CN

The common name of the client certificate, if one exists.

Example: ClientCrtCN == "yoursite.com"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain

Client ID

The Imperva ID for the client application. For example:

  • Googlebot (Search bot) (6)

  • cURL (Developer Tool) (47)

When adding or editing a rule in the Cloud Security Console, start entering text in the value field to display a list of available values.

Example: ClientId == 15

Note: When used in a cache rule, this parameter may be used with the Enrich Cache Key rule action only.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Client IP

The client (source) IP of the current request.

Example:

ClientIP == 120.0.0.1

You can also enter an IP using CIDR notation, such as 120.0.0.1/24.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Client Type

The client application type, such as Browser or SpamBot. Select from the list of available values.

Example: ClientType == Browser

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Continent Code

The client (source) IP origin continent.

Example: ContinentCode == "EU"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Country Code

The client (source) IP origin country.

Example: CountryCode == GB

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Declared Client Id

The ID of the client application, according to the declaration in the UserAgent HTTP header.

When adding or editing a rule in the Cloud Security Console, start entering text in the value field to display a list of available values.

Example: DecClientId == 77 (Java Developer Tool)

Supported Operators
UI Predicates Description
== Is equal to
!=

Is not

Declared Client Type

Client type based on the client declaration in the UserAgent HTTP header.

Example: DecClientType == "Browser"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Epoch

The UNIX timestamp of the request - the number of microseconds since midnight January 1, 1970.

Example: Epoch == 1502617252

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

Is Mobile

Distinguishes between requests coming from mobile devices and requests coming from desktop clients based on the user-agent used in the request.

Example:

This rule is triggered when a request made for URL path “welcome.html” is sent from a mobile device.

URL == "/welcome.html" & isMobile == Yes

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Latitude

The approximate latitude coordinates of the client sending the request.

Example: Latitude == 4.863890

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

Longitude

The approximate longitude coordinates of the client sending the request.

Example: Longitude == 4.863890

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

Postal Code

The postal/zip code of the client sending the request. May be available for requests from specific countries.

Example: PostalCode == 123456

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Source Port

The client's outgoing port number. It can be used, for example, to distinguish users behind NAT.

Example: SrcPort == 6000

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

State

The name of the stage where the client sending the request is located. The two-character state, province, or region code, where applicable.

Example: State == NY

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

User Agent

Checks for the specified string pattern in the User-Agent header in the client request.

Example: User-Agent contains "googlebot"

Note: This parameter cannot be used with the Cache Resource rule action.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Request Parameters

ABP Action

Checks for the action taken by Advanced Bot Protection (ABP).

Availability: For use by Advanced Bot Protection customers only.

Example: abp-action == "captcha_cleared"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain

Accept

Checks for the specified string pattern in the Accept HTTP header value.

Example: Accept == "text/html"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Accept Charset

Checks for the specified string pattern in the Accept-Charset HTTP header value.

Example: Accept-Charset == "utf-8"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Accept Encoding

Checks for the specified string pattern in the Accept-Encoding HTTP header value.

Example: Accept-Encoding == "gzip"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Accept Language

Checks for the specified string pattern in the Accept-Language HTTP header value.

Example: Accept-Language == "en-us"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Any Header Value

Checks for the specified string pattern in the values of all HTTP headers.

Example: AnyHeaderValue == "debug"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Any Param Value

Checks for the specified string pattern in the values of all parameters in the query string and post body of the client request.

Example: AnyParamValue == "debug"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Body Param Exists

Checks for the specified string pattern in the parameter names in the post data in the client request.

Example: BodyParamExists != "test"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain

See also Query String Param Exists and Param Exists.

Body Param Value

Checks for specified string patterns with a specific parameter value in the post body. In the example, the filter looks for an exact match of PVAL in the value of the parameter PNAME.

Example: BodyParamValue == {"PNAME";"PVAL"}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

See also Query String Param Value and Param Value.

Connection

Checks for the specified string pattern in the Connection HTTP header value.

Example: Connection == "keep-alive"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Content Type

The value of the Content-Type HTTP header in the request.

Example: Content-Type contains "json"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains

Value contains

not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Checks for the specified string pattern in the cookie names in the client request.

Example: CookieExists == "SessionID"

Note: This parameter cannot be used with the Cache Resource rule action.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Checks for the specified string patterns in the cookie name and value in the client request.

Example: CookieValue == {"cookie_name";"cookie_value"}

Note: This parameter cannot be used with the Cache Resource rule action.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Full-URL

Checks for the specified string pattern in the full path in the client request, including the query string. The protocol (http/s) and host name are ignored.

Example: Full-URL contains "/uploads/upload.php?id=17"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Has Cache Tag

Checks for the specified cache tag in the client request.

Note: This filter is applicable when adding a request header in a delivery rule (Rewrite Header rule).

In this example, the filter looks for the cache tag cache-tag-example.

Example: HasCacheTag == "cache-tag-example"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Header Exists

Checks whether a certain HTTP header exists.

Example: HeaderExists == "Content-Length"

Note:  

  • This parameter cannot be used with the Cache Resource rule action.

  • This parameter considers the first value only. If additional values are entered, the filter does not work.

    For example:

    Supported: HeaderExists == "Cookie" & HeaderExists == "Host" & HeaderExists == "Accepts-Language"

    Supported: HeaderExists == "Cookie"| HeaderExists == "Host" | HeaderExists == "Accepts-Language"

    Not supported: HeaderExists == "Cookie;Host;Accepts-Language"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Header Value

Checks for string patterns with a specific field value in the request headers. In the example, the filter looks for an exact match of HeaderValue in the value of the header HeaderName.

Example: HeaderValue == {"HeaderName";"HeaderValue"}

Note:  

  • This parameter is not case-sensitive.
  • This parameter cannot be used with the Cache Resource rule action.
Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Header Value Length

Checks the length of the specified HTTP header.

Example: HeaderValueLength > {"Cookie";1024}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

HTTP Version

The HTTP version of the request.

Example: Ver == "1.1"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

IP Version

The IP version of the request.

Example: IpVersion == 4

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

is HTTPS

Checks whether or not the request is HTTPS.

Example: is-HTTPS == No

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Is Naked Domain

Checks if the domain name is a naked domain.

Example: IsNakedDomain == Yes

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Max Header Size

The size of the largest HTTP header value.

Example: MaxHeaderSize >= 50

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Method

The HTTP method in the client request.

Example: Method == POST

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Num On Session

The index of the current request in the current session.

Example: NumOnSession > 7

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Param Exists

Checks for the specified string pattern in the parameter names in the query string and post data in the client request.

Example: ParamExists != "test"

Note: This parameter cannot be used with the Cache Resource rule action.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain

To check for the parameter in only the query string or in the post body, see Query String Param Exists and Body Param Exists.

Param Value

Checks for specified string patterns with a specific parameter value in the request query string or post body. In the example, the filter looks for an exact match of PVAL in the value of the parameter PNAME.

Example: ParamValue == {"PNAME";"PVAL"}

Note: This parameter cannot be used with the Cache Resource rule action.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with
< Value is smaller than
> Value is larger than
>= Value is equal to or larger than
<= Value is equal to or smaller than

To check for the parameter value in only the query string or in the post body, see Query String Param Value and Body Param Value.

Post Data

Checks for the specified string pattern in the raw post data in the client request.

Example: PostData contains "username=bob&password=alice"

Supported Operators
UI Predicates Description
contains Value contains
not-contains Does not contain

Post Data Exists

The request contains post data.

Example: PostDataExists == Yes

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Post Size

The length of POST body in bytes. If the Content-Length header is present, its value is used.

If the data is chunked, the currently accumulated post size that was read is used.

Example: PostSize >= 500

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

Query String

Checks for the specified string pattern in the query string in the client request.

Example: QueryString == "type=gif"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Query String Param Exists

Checks for the specified string pattern in the parameter names in the query string in the client request.

Example: QueryStringParamExists != "test"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain

See also Body Param Exists and Param Exists.

Query String Param Value

Checks for specified string patterns with a specific parameter value in the request query string. In the example, the filter looks for an exact match of PVAL in the value of the parameter PNAME.

Example: QueryStringParamValue == {"PNAME";"PVAL"}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

See also Body Param Value and Param Value.

Referer

Checks for the specified string pattern in the Referer header in the client request.

Example: Referer contains "google.com"

Supported Operators
UI Predicates Description
== Is equal to
!= Does not contain
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Request Size

The size of request in bytes, not including the body.

Example: RequestSize >= 500

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Resource Type

The type of the requested resource: HTML or non-HTML.

Example: ResourceType == non-html

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Scheduler

The times and days for a custom rule to be active. The rule is triggered when requests arrive during the specified times and match all other conditions of the rule filter.

Format: {minutes;hours;days_in_month;months;days_in_week}

Example: Scheduler == {30-59;12;*;*;1,4}

For details on syntax and additional examples, see Scheduler.

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

SSL Cipher

The cipher suite in the request.

Enter the cipher suite name according to OpenSSL supported ciphers.

For a full list of possible values, download and install OpenSSL and run the following command: openssl ciphers -v ALL

Example: SslCipher == "ECDHE-RSA-AES128-GCM-SHA256";"can-add-another-type-here"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

SSL Version

The SSL(TLS) Version.

Example: SslVersion == tls1_2

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

URL

Checks for the specified string pattern in the path in the client request.

Example: URL contains "/uploads/upload.php"

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
contains Value contains
not-contains Does not contain
starts with Starts with
ends with Ends with
does not start with Does not start with
does not end with Does not end with

Counter Parameters

API Rate

Measures the rate of API requests in a client session during a one minute period.

Example: Rate >= {api-rate;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

API Rate IP

Measures the rate of API requests from a single IP during a one minute period.

Example: Rate >= {api-rate-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Ajax Rate General

Measures the rate of AJAX requests (x-requested-with) per session over a period of 1 minute.

Example: Rate > {ajax-rate-general;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Ajax Rate GET

Measures the rate of GET AJAX requests (x-requested-with) per session over a period of 1 minute.

Example: Rate > {ajax-rate-get;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Ajax Rate POST

Measures the rate of POST AJAX requests (x-requested-with) per session over a period of 1 minute.

Example: Rate > {ajax-rate-post;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Attack

Checks whether the request generated an attack alert.

Example: Attack == Yes

Supported Operators
UI Predicates Description
== Is equal to
!= Is not

Attack Count

The number of attack alerts in the current or previous requests in a session.

Example: AttacksCount >= 5

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Attack IP

Measures the rate of malicious (blocked) requests per IP over a period of 1 minute.

Example: Rate > {attack-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Custom Rate

Use a custom, user-defined rate to filter the traffic and trigger your rule when the rate passes a specified threshold.

For example:

Supported Operators
UI Predicates Description
>= Value is equal to or larger than

For details on creating custom rates, see Create Rate Rules.

Dynamic Page Rate

Measures the rate of requests per IP to known resource-intensive pages over a period of one minute.

Example: Rate >= {dynamic-content-rate-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is less than or equal to

Get Page IP Rate

Measures the rate of GET requests per IP address over a period of one minute.

Example: Rate >= {get-page-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Home Page Rate

Measures the rate of requests to the homepage (/) per session over a period of 1 minute.

Example: Rate > {homepage-rate;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Home Page Rate IP

Measures the rate of requests to the homepage (/) per IP address over a period of 1 minute.

Example: Rate > {homepage-rate-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Admin Sugarcrm

Measures the rate of requests to a SugarCRM login page per IP over a period of 1 minute.

Example: Rate > {login-bf-sugarcrm;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Admin Zencart

Measures the rate of requests to a Zen Cart login page per IP over a period of 1 minute.

Example: Rate > {login-bf-admin-zencart;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Concrete 5

Measures the rate of requests to a concrete5 login page per IP over a period of 1 minute.

Example: Rate > {login-bf-concrete5;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Drupal

Measures the rate of requests to a Drupal login page per IP over a period of 1 minute.

Example: Rate > {login-bf-drupal;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Joomla

Measures the rate of requests to a Joomla login page per IP over a period of 1 minute.

Example: Rate > {login-bf-joomla;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF osCommerce

Measures the rate of requests to a osCommerce login page per IP over a period of 1 minute.

Example: Rate > {login-bf-oscommerce;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Php My Admin

Measures the rate of requests to a PHPMyAdmin login page per IP over a period of 1 minute.

Example: Rate > {login-bf-phpmyadmin;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login BF Wp

Measures the rate of requests to a WordPress login page per IP over a period of 1 minute.

Example: Rate > {login-bf-wp;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login IP

Measures the rate of requests to a login page per IP over a period of 1 minute.

Example: Rate > {login-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login IP Common Admins

Measures the rate of requests done with common administrator credentials per IP over a period of 1 minute.

Example: Rate > {login-ip-common-admins;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Login IP Common Passwords

Measures the rate of requests to a login page with a list of common passwords per IP over a period of 1 minute.

Example: Rate > {login-ip-common-passwords;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Number of User Agents

The number of unique user agents header strings in one session.

Example: NumberOfUserAgents > 7

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is less than or equal to

Page Hits Counter

The number of page views in the client session.

Example: PageHitsCounter >= 2

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is less than or equal to

Page Rate

Measures the rate of HTML requests per session over a period of 1 minute.

Example: Rate > {page-rate;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Page Rate IP 1m

Measures the rate of HTML requests per IP address over a period of 1 minute.

Example: Rate > {page-rate-ip-1m;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Page Rate IP 5s

Measures the rate of HTML requests per IP address over a period of 5 seconds.

Example: Rate > {page-rate-ip-5s;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Post IP

Measures the rate of POST requests per IP address over a period of one minute.

Example: Rate >= {post-ip;5}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is less than or equal to

Post IP 5s

Measures the rate of POST requests per IP address over a period of 5 seconds.

Example: Rate > {post-ip-5s;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Post Rate

Measures the rate of POST requests per session over a period of one minute.

Example: Rate >= {post-rate;6}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is greater than or equal to
<= Value is equal to or smaller than

Request Rate IP

Measures the rate of requests per IP over a period of one minute.

Example: Rate > {request-rate-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Request Rate Session

Measures the rate of requests per session over a period of one minute.

Example: Rate >= {request-rate-session;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is smaller than
< Value is larger than
>= Value is greater than or equal to
<= Value is less than or equal to

Request Rate Wl IP

Whitelisted requests per IP over a period of one minute.

Example: Rate > {request-rate-wl-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Request Rate Wl Sess

Whitelisted requests per session over a period of one minute.

Example: Rate > {request-rate-wl-sess;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Session Creation IP Rate

Sessions with more than 5 requests from a specific IP during a 5 minute period.

Example: Rate > {session-creation-ip;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Site Request Rate

Measures the RPS (requests per second) for the website over a period of 5 seconds.

Example: SiteRequestRate > 300

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Site Average Request Rate 1m

Measures the average RPS (requests per second) for the website over a period of 1 minute.

Example: SiteAverageRequestRate1m > 3500

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Static Rate IP 5s

Measures the rate of non-HTML requests per IP address over a period of 5 seconds.

Example: Rate > {static-rate-ip-5s;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

XML RPC PingBack

Measures the rate of WordPress XML RPC requests (To xmlrpx.php) per IP over a period of 1 minute.

Example: Rate > {xmlrpc-pingback;4}

Supported Operators
UI Predicates Description
== Is equal to
!= Is not
> Value is larger than
< Value is smaller than
>= Value is equal to or larger than
<= Value is equal to or smaller than

Read More

Join the Discussion