-----Original Message-----
From: Tim Boneko via Fail2ban-users <[email protected]>
Sent: Sunday, 21 September, 2025 11:09 AM
To: [email protected]
Subject: Re: [Fail2ban-users] froxlor
Am Samstag, dem 20.09.2025 um 16:49 +0000 schrieb Dudi Goldenberg:
>
> Sep 20 14:44:52 hostname froxlor[181107]: froxlor.WARNING: Unknown
> user tried to login.
> {"source":"login","action":"50","user":"141.226.1.2"} []
That's one ugly log line.
Agreed.
Do you have a possibility to change the formatting of the log line? Maybe
point log output towards journal?
I just checked, journalctl shows the exact same syntax, and I have no control
of the logging there, apart from log filenames etc.
I'll have another shot at a new regex, but this will grey out the little hair I
have left, and it will be ugly 😊
I'd rather have someone better at this then me do this.
Cheers,
tim
Regards,
Dudi
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
