Report issue and custom rule broken

[averus008]

What is the name of the domain?

Example Domain

What is the error message?

1.Report issue and filter also broken: “Query string: Empty query string” at all times in report. 2.Query ?w goes through filter but this is $w=true, means will go through cache

What is the issue you’re encountering

to block /?w, /?w=rw4tdfjguh

What steps have you taken to resolve the issue?

(http.request.uri.path eq “/”) and (len(http.request.uri.query) gt 0)
(http.request.uri.path eq “/”) and (len(http.request.uri.query) gt 1)
(http.request.uri.path eq “/”) and (len(http.request.uri.query) eq “”)

i can try to debug more but Report has “Query string: Empty query string” at all times with /?w or /?wwqqwe=weqwe with any query string.

What are the steps to reproduce the issue?

Example Domain - not filtered, means DDOS will go through cache and through rule
Example Domain filtered
.com/?w or .com?w doesnt matter

Screenshot of the error

[ikmal]

The number you highlighted indicates that the request context matches the rule you configured. However, you need to refer to the CSR percentage — a lower value means the most request was not able to solve the challenge and getting block.

Challenge solve rate (CSR) · Cloudflare Fundamentals docs

[averus008]

It’s clear the issue wasn’t understood. The reply provided was unhelpful and seemed like a standard response just to avoid leaving my query unanswered, rather than a real attempt to assist. It appears that genuine support is lacking here