review (anchoring RE, etc)

pull/3466/head
sebres 2024-07-30 19:16:40 +02:00
parent db8c943a7b
commit 9a558589d7
2 changed files with 8 additions and 7 deletions

View File

@ -12,7 +12,9 @@
[Definition]
failregex = pvedaemon\[\d*\]: authentication failure; rhost=<HOST> user=.* msg=.*
_daemon = pvedaemon
failregex = ^\s*\S+ %(_daemon)s\[\d+\]: authentication failure; rhost=<ADDR> user=<F-USER>\S+</F-USER>
ignoreregex =

View File

@ -1,6 +1,5 @@
#1
# failJSON: { "time": "2005-03-08T09:37:44", "match": true , "host": "212.106.229.105" }
Mar 8 09:37:44 HOSTNAME pvedaemon[12021]: authentication failure; rhost=212.106.229.105 user=root@pam msg=Authentication failure
#2
# failJSON: { "time": "2005-03-09T03:32:27", "match": true , "host": "212.106.229.105" }
Mar 9 03:32:27 HOSTNAME pvedaemon[8961]: authentication failure; rhost=212.106.229.105 user=jose@pve msg=invalid credentials
# failJSON: { "time": "2005-03-08T09:37:44", "match": true , "host": "192.0.2.123" }
Mar 8 09:37:44 HOSTNAME pvedaemon[12021]: authentication failure; rhost=192.0.2.123 user=root@pam msg=Authentication failure
# failJSON: { "time": "2005-03-09T03:32:27", "match": true , "host": "192.0.2.124" }
Mar 9 03:32:27 HOSTNAME pvedaemon[8961]: authentication failure; rhost=192.0.2.124 user=jose@pve msg=invalid credentials