53 lines
No EOL
1.5 KiB
JavaScript
53 lines
No EOL
1.5 KiB
JavaScript
const query = `query ListFirewallEvents($zoneTag: string, $filter: FirewallEventsAdaptiveFilter_InputObject) {
|
|
viewer {
|
|
zones(filter: { zoneTag: $zoneTag }) {
|
|
firewallEventsAdaptive(
|
|
filter: $filter,
|
|
limit: 1000,
|
|
orderBy: [datetime_DESC]
|
|
) {
|
|
action
|
|
clientASNDescription
|
|
clientAsn
|
|
clientCountryName
|
|
clientIP
|
|
clientRequestHTTPHost
|
|
clientRequestHTTPMethodName
|
|
clientRequestHTTPProtocol
|
|
clientRequestPath
|
|
clientRequestQuery
|
|
datetime
|
|
rayName
|
|
ruleId
|
|
source
|
|
userAgent
|
|
}
|
|
}
|
|
}
|
|
}`;
|
|
|
|
module.exports = () => {
|
|
const variables = {
|
|
zoneTag: process.env.CLOUDFLARE_ZONE_ID,
|
|
filter: {
|
|
datetime_geq: new Date(Date.now() - (60 * 60 * 12 * 1000)).toISOString(),
|
|
datetime_leq: new Date(Date.now() - (60 * 60 * 8 * 1000)).toISOString(),
|
|
AND: [
|
|
{ action_neq: 'allow' },
|
|
{ action_neq: 'skip' },
|
|
{ action_neq: 'challenge_solved' },
|
|
{ action_neq: 'challenge_failed' },
|
|
{ action_neq: 'challenge_bypassed' },
|
|
{ action_neq: 'jschallenge_solved' },
|
|
{ action_neq: 'jschallenge_failed' },
|
|
{ action_neq: 'jschallenge_bypassed' },
|
|
{ action_neq: 'managed_challenge_skipped' },
|
|
{ action_neq: 'managed_challenge_non_interactive_solved' },
|
|
{ action_neq: 'managed_challenge_interactive_solved' },
|
|
{ action_neq: 'managed_challenge_bypassed' }
|
|
]
|
|
}
|
|
};
|
|
|
|
return { query, variables };
|
|
}; |