mirror of https://github.com/fail2ban/fail2ban
amend to f21c58dc72
, better follow previous handling with last known datetime (compatibility for multi-line logs, in case of second line without a timestamp)
parent
f21c58dc72
commit
76e5d2b199
|
@ -625,11 +625,14 @@ class Filter(JailThread):
|
||||||
self.__lastDate = date
|
self.__lastDate = date
|
||||||
else:
|
else:
|
||||||
logSys.error("findFailure failed to parse timeText: %s", m)
|
logSys.error("findFailure failed to parse timeText: %s", m)
|
||||||
|
# matched empty value - date is optional or not available - set it to last known or now:
|
||||||
|
elif self.__lastDate and self.__lastDate > MyTime.time() - 60:
|
||||||
|
# set it to last known:
|
||||||
|
tupleLine = ("", self.__lastTimeText, line)
|
||||||
|
date = self.__lastDate
|
||||||
else:
|
else:
|
||||||
# matched empty value - date is optional or not available - set it to now:
|
# set it to now:
|
||||||
date = MyTime.time()
|
date = MyTime.time()
|
||||||
self.__lastTimeText = ""
|
|
||||||
self.__lastDate = date
|
|
||||||
else:
|
else:
|
||||||
tupleLine = ("", "", line)
|
tupleLine = ("", "", line)
|
||||||
# still no date - try to use last known:
|
# still no date - try to use last known:
|
||||||
|
|
Loading…
Reference in New Issue