secubox-openwrt/package/secubox/secubox-auth-logger/files/secubox-auth-acquis.yaml
CyberMind-FR b5567ff747 fix(secubox-auth-logger): Simplify log format for CrowdSec parsing
- v1.2.1: Remove timestamp generation (ucode time functions unavailable)
- Use simple format: secubox-auth[1]: authentication failure for...
- Update parser to use raw line parsing with custom label type
- Change acquisition from type:syslog to type:secubox-auth

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-13 15:55:30 +01:00

8 lines
245 B
YAML

# SecuBox Auth Logger Acquisition
# Reads authentication failure logs from secubox-auth-logger
# Used by secubox/openwrt-luci-auth parser and secubox/openwrt-luci-bf scenario
filenames:
- /var/log/secubox-auth.log
labels:
type: secubox-auth