From 4163f329688e89c3d551423a0e3d9be02adb9897 Mon Sep 17 00:00:00 2001
From: sebres <serg.brester@sebres.de>
Date: Mon, 4 Sep 2017 11:48:01 +0200
Subject: [PATCH] small review, prefix replaced with `%(_apache_error_client)s`
 from apache-common.conf include

---
 config/filter.d/zoneminder.conf | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/config/filter.d/zoneminder.conf b/config/filter.d/zoneminder.conf
index aa3b4e6d..cc82755a 100644
--- a/config/filter.d/zoneminder.conf
+++ b/config/filter.d/zoneminder.conf
@@ -1,5 +1,7 @@
 # Fail2Ban filter for Zoneminder login failures
-#
+
+[INCLUDES]
+before = apache-common.conf
 
 [Definition]
 
@@ -7,13 +9,9 @@
 #
 #
 # Option:  failregex
-# Notes.:  regex to match the password failure messages in the logfile. The
-#          host must be matched by a group named "host". The tag "<HOST>" can
-#          be used for standard IP/hostname matching and is only an alias for
-#          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
+# Notes.:  regex to match the password failure messages in the logfile.
 
-
-failregex = ^\[\](?: \[:error\])?(?: \[pid \d+\])? \[client <HOST>:\d+\] WAR \[Login denied for user "[^"]*"\]
+failregex = ^%(_apache_error_client)s WAR \[Login denied for user "[^"]*"\]
 
 ignoreregex =