I’m looking into trying to use crowdsec to manage multiple server groups with different services.
Am I understanding the documentation correctly when i take it that if a decision is created it is blocked on all machine, there is no way to group them per group of machines?
(ex. cause someone is failing to log into there smtp account doesn’t mean they should be blocked from the website)
This could be solved by running multiple instances of crowdsec, but that makes managing them quite combersum.
I saw in a different thread that machine is getting added to the data, can decisions be done by machine? and possibly multiple of them?