Role Based Access Control (RBAC) Network Filter

    The RBAC network filter outputs statistics in the <stat_prefix>.rbac. namespace.

    Dynamic Metadata

    The RBAC filter emits the following dynamic metadata.

    Name

    Type

    Description

    shadow_effective_policy_id

    string

    The effective shadow policy ID matching the action (if any).

    shadow_engine_result

    The engine result for the shadow rules (i.e. either allowed or denied).