Current logic does not export Flow Spec attacks to Clickhouse table attack_events