cf.waf.content_scan.num_obj
cf.waf.content_scan.num_objIntegerThe number of content objects detected in the request (zero or greater).
Requires a Cloudflare Enterprise plan with malicious uploads detection.
Example usage:
# Check if requests to a specific endpoint contain more than two content objects
cf.waf.content_scan.num_obj > 2 and http.request.uri.path eq "/upload"Categories:
- Request