diff --git a/pkg/acquisition/modules/appsec/utils.go b/pkg/acquisition/modules/appsec/utils.go index 8995b305680..65bb4601c21 100644 --- a/pkg/acquisition/modules/appsec/utils.go +++ b/pkg/acquisition/modules/appsec/utils.go @@ -296,6 +296,7 @@ func (r *AppsecRunner) AccumulateTxToEvent(evt *types.Event, req *appsec.ParsedR "hash": hash, "version": version, "matched_zones": matchedZones, + "logdata": rule.Data(), } evt.Appsec.MatchedRules = append(evt.Appsec.MatchedRules, corazaRule) }