preview_denies
Preview DENY counts per rule priority to identify false-positive-free rules and promote them to enforce.
Instructions
Preview (dry-run) DENY counts per rule priority over the window.
A preview rule that stays free of false positives is a candidate for promotion to enforce.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| since_hours | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |