Logomotion: maj formation Sécurité Web

developpement/securite_web/ressources/prometheus-demo/prometheus/prometheus.yml

@@ -0,0 +1,30 @@
+# Configuration de l'application sur laquelle
+# Prometheus doit récolter des informations
+
+scrape_configs:
+  - job_name: app1
+    scrape_interval: 10s
+    metrics_path: /metrics
+    static_configs:
+      - targets: [ "app1:3000" ]
+  # - job_name: app2
+  #   scrape_interval: 10s
+  #   metrics_path: /metrics
+  #   static_configs:
+  #     - targets: [ "app2:3000" ]
+  # - job_name: cadvisor
+  #   scrape_interval: 10s
+  #   metrics_path: /metrics
+  #   static_configs:
+  #     - targets: [ "cadvisor:8080" ]
+
+# Configuration de l'alertmanager
+
+alerting:
+  alertmanagers:
+    - static_configs:
+      - targets: [ "alertmanager:9093" ]
+
+# Définition des règles d'alertes
+rule_files:
+  - "/etc/prometheus/rules.d/*.yml"

developpement/securite_web/ressources/prometheus-demo/prometheus/rules.d/auth_failure_alert.yml

@@ -0,0 +1,6 @@
+groups:
+  - name: auth_failure_alert
+    rules:
+    - alert: AuthFailureAlert
+      expr: delta(job:auth_failure:sum_by_ip[30s]) > 10
+      for: 10s

developpement/securite_web/ressources/prometheus-demo/prometheus/rules.d/auth_failure_by_ip.yml

@@ -0,0 +1,6 @@
+groups:
+  - name: auth_failure_sum_by_ip
+    interval: 5s
+    rules:
+    - record: job:auth_failure:sum_by_ip
+      expr: sum(auth_failure_counter) by (ip)