{
"action": "execute",
"action_parameters": {
"id": "4814384a9e5d4991b9815dcfc25d2f1f"
},
"description": "Execute the OWASP ruleset when the IP address is not 1.1.1.1",
"enabled": true,
"expression": "ip.src ne 1.1.1.1",
"logging": {
"enabled": true
},
"ref": "my_ref"
}