secubox-openwrt/package/secubox/secubox-app-crowdsec-custom/files/acquis.d/secubox-haproxy.yaml
CyberMind-FR 1fb2b11d4a feat(crowdsec+haproxy): Dashboard refactor, custom parsers & scenarios
CrowdSec Dashboard:
- Refactor all views (alerts, bouncers, decisions, overview, settings)
- Add soc.css for Security Operations Center styling
- Remove 3000+ lines of redundant code

CrowdSec Custom Parsers & Scenarios:
- Add secubox-gitea parser and bruteforce scenario
- Add secubox-haproxy parser and bruteforce scenario
- Add secubox-streamlit parser and bruteforce scenario
- Add secubox-webapp parser and bruteforce scenario
- Update Makefile for new parser/scenario files

HAProxy:
- Update api.js, backends.js view improvements
- Update luci.haproxy RPCD backend
- Update haproxyctl helper script

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-27 11:16:17 +01:00

19 lines
354 B
YAML

# CrowdSec acquisition for HAProxy logs
# Monitors HAProxy authentication and access events
source: file
filenames:
- /var/log/haproxy.log
- /var/log/haproxy/access.log
labels:
type: haproxy
---
# HAProxy syslog entries
source: file
filenames:
- /var/log/messages
- /tmp/log/messages
labels:
type: syslog
filter: "contains(Line, 'haproxy')"