sebres e605415f61 simplify fields-group a bit (everything up to 4 chars long but H), so it'll be faster (no multiple branches) as well as would theoretically accept future enhancements of logged fields.		2024-03-22 16:47:54 +01:00
..
ignorecommands	filter.d/ignorecommands/apache-fakegooglebot: added timeout parameter (default 55 seconds) - avoid fail with timeout (default 1 minute) by reverse lookup on some slow DNS services (googlebots must be resolved fast);	2021-03-02 19:35:27 +01:00
3proxy.conf	…
apache-auth.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
apache-badbots.conf	…
apache-botsearch.conf	…
apache-common.conf	filter.d/apache-common.conf: remote besides client, gh-3622	2024-03-15 22:36:40 +01:00
apache-fakegooglebot.conf	filter.d/apache-fakegooglebot.conf: better, more precise regex and datepattern (closes possible weakness like #3013)	2021-05-11 13:47:48 +02:00
apache-modsecurity.conf	updated	2019-04-24 21:35:19 +02:00
apache-nohome.conf	…
apache-noscript.conf	filter.d/apache-noscript.conf: extended to match "script not found" with error AH02811 (and cgi-bin path segment in script)	2020-11-23 17:25:41 +01:00
apache-overflows.conf	filter.d/apache-overflows.conf: extended to match AH00126 error (Invalid URI ...);	2021-01-11 15:10:53 +01:00
apache-pass.conf	…
apache-shellshock.conf	…
assp.conf	…
asterisk.conf	Add transport to asterisk RE	2021-01-31 15:22:16 +01:00
bitwarden.conf	review and small tweaks (more precise and safe RE)	2020-11-09 13:43:59 +01:00
botsearch-common.conf	…
centreon.conf	Add Centreon jail	2019-10-24 14:37:18 +02:00
common.conf	common.conf: fixed typo in comment (rfc5424 for logtype)	2022-05-12 18:09:09 +02:00
counter-strike.conf	…
courier-auth.conf	filter.d/courier-auth.conf: consider optional port after IP, regex is rewritten without catch-all's and right anchor, so it is more stable against further modifications now;	2022-02-09 12:18:23 +01:00
courier-smtp.conf	filter.d/courier-smtp.conf: prefregex extended to consider port in log-message (closes gh-2697)	2020-04-21 13:32:17 +02:00
cyrus-imap.conf	…
dante.conf	IPv6 fix (second IP logged in form for IPv6); pam authentication failure (part of gh-3410)	2023-12-30 15:10:37 +01:00
directadmin.conf	…
domino-smtp.conf	filter.d/domino-smtp.conf:	2018-09-21 14:14:00 +02:00
dovecot.conf	fixes gh-3370: resolve extremely long search by repeated apply of non-greedy RE `(?:: (?:[^\(]+|\w+\([^\)]*\))+)?` with following branches (it may be extremely slow up to infinite search depending on message); added new regression tests	2022-10-04 14:10:45 +02:00
dropbear.conf	…
drupal-auth.conf	more precise RE (avoids weakness with catch-all's and is injection safe)	2021-02-11 18:32:32 +01:00
ejabberd-auth.conf	…
exim-common.conf	simplify fields-group a bit (everything up to 4 chars long but H), so it'll be faster (no multiple branches) as well as would theoretically accept future enhancements of logged fields.	2024-03-22 16:47:54 +01:00
exim-spam.conf	filter.d/exim.conf: rewrite host line regex for all varied exim's log_selector states	2024-03-22 00:16:41 +03:00
exim.conf	filter.d/exim.conf: rewrite host line regex for all varied exim's log_selector states	2024-03-22 00:16:41 +03:00
freeswitch.conf	filter.d/freeswitch.conf: provide mode parameter, allows to avoid matching of messages like `auth challenge (REGISTER)` (see gh-2163) (currently `extra` as default to be backwards-compatible), see comments in filter how to set it to mode `normal`.	2018-08-03 11:42:15 +02:00
froxlor-auth.conf	…
gitlab.conf	New Gitlab jail	2020-04-09 16:42:08 +02:00
grafana.conf	no catch-alls, user name and error message stored in ticket	2020-11-09 15:36:30 +01:00
groupoffice.conf	…
gssftpd.conf	…
guacamole.conf	Enhance Guacamole jail	2020-08-25 13:01:50 +02:00
haproxy-http-auth.conf	…
horde.conf	…
kerio.conf	…
lighttpd-auth.conf	filter.d/lighttpd-auth.conf: adjusted to the current source code + avoiding catch-all's, etc (gh-3116)	2021-10-01 15:03:24 +02:00
mongodb-auth.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
monit.conf	filter.d/common.conf: closes gh-2650, avoid substitute of default values in related `lt_*` section, `__prefix_line` should be interpolated in definition section (after the config considers all sections that can overwrite it);	2020-03-05 13:47:11 +01:00
monitorix.conf	more precise anchored RE (also combining all 3 REs in a single regex)	2021-04-14 13:06:58 +02:00
mssql-auth.conf	precise regex (left anchor and fewer catch-all's); fixed tests (added failJSON and more tests for some corner-cases around new RE)	2021-04-03 20:16:47 +02:00
murmur.conf	…
mysqld-auth.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
nagios.conf	…
named-refused.conf	`filter.d/named-refused.conf` extended (closes gh-3388):	2022-11-03 11:41:21 +01:00
nginx-bad-request.conf	fix: add journalmatch to nginx filters	2021-04-03 19:20:50 +02:00
nginx-botsearch.conf	fix: add journalmatch to nginx filters	2021-04-03 19:20:50 +02:00
nginx-error-common.conf	more filters for nginx error-log supporting journal format now, added generalized include and __prefix_line	2023-12-10 15:21:20 +01:00
nginx-forbidden.conf	more filters for nginx error-log supporting journal format now, added generalized include and __prefix_line	2023-12-10 15:21:20 +01:00
nginx-http-auth.conf	more filters for nginx error-log supporting journal format now, added generalized include and __prefix_line	2023-12-10 15:21:20 +01:00
nginx-limit-req.conf	more filters for nginx error-log supporting journal format now, added generalized include and __prefix_line	2023-12-10 15:21:20 +01:00
nsd.conf	restore anchor (e. g. catch all in the middle), dot is optional now, RE rewritten a bit more precise	2021-04-03 21:00:14 +02:00
openhab.conf	…
openwebmail.conf	…
oracleims.conf	…
pam-generic.conf	…
perdition.conf	…
php-url-fopen.conf	…
phpmyadmin-syslog.conf	typo	2020-11-23 18:08:38 +01:00
portsentry.conf	…
postfix.conf	filter.d/postfix.conf: add Sender address rejected: Malformed DNS server reply (#3590)	2024-03-19 20:30:45 +01:00
proftpd.conf	typo	2020-11-23 18:07:49 +01:00
pure-ftpd.conf	…
qmail.conf	…
recidive.conf	filter.d/recidive.conf: conditional RE depending on logtype (for file or journal)	2024-03-11 17:49:06 +01:00
roundcube-auth.conf	…
routeros-auth.conf	New filter: routeros-auth.conf (Closes #3469)	2023-03-02 09:25:24 +01:00
scanlogd.conf	small amend: sport after saddr is optional	2021-04-03 23:29:16 +02:00
screensharingd.conf	…
selinux-common.conf	small amend (non capturing group)	2022-11-14 18:56:01 +01:00
selinux-ssh.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
sendmail-auth.conf	filter.d/sendmail-auth.conf: detect failures without user part	2022-08-01 09:20:28 +02:00
sendmail-reject.conf	filter.d/sendmail-reject.conf: fix reverse DNS for ... (gh-3012)	2021-05-29 18:45:59 +02:00
sieve.conf	…
slapd.conf	gh-3604: filter.d/slapd.conf - switched to single-line processing	2023-10-18 16:06:56 +02:00
softethervpn.conf	small tweaks (both 2nd time and facility are optional, avoid catch-all, etc)	2020-11-09 13:19:25 +01:00
sogo-auth.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
solid-pop3d.conf	…
squid.conf	…
squirrelmail.conf	…
sshd.conf	filter.d/sshd.conf: ddos/aggressive mode extended to match new messages caused by port scanner, wrong payload on ssh port:	2024-02-13 16:53:21 +01:00
stunnel.conf	…
suhosin.conf	…
tine20.conf	…
traefik-auth.conf	[DATALAD RUNCMD] run codespell throughout fixing typo automagically	2023-11-18 10:04:04 -05:00
uwimap-auth.conf	…
vsftpd.conf	…
webmin-auth.conf	…
wuftpd.conf	…
xinetd-fail.conf	…
znc-adminlog.conf	filter.d/znc-adminlog.conf: support logging format of systemd-journal, bypass port after address (optional, removed end-anchor, see gh-2520)	2019-09-10 21:02:26 +02:00
zoneminder.conf	padding with space, prefregex, regex review (simplifying, capture user name, consider possible space char in user name)	2021-05-21 13:00:24 +02:00