Hi!
I'm using fail2ban 0.11.0.3.

I’m trying to write a filter to capture error from log file with cyrillic
symbols, but it not working.
I've tried to use different encodings but that didn't help

Here's a output fail2ban-regex

fail2ban-regex -e utf8 --print-all-matched /opt/test.log
/etc/fail2ban/filter.d/test.conf

Running tests
=============

Use   failregex filter file : test, basedir: /etc/fail2ban
Use      datepattern : ^Month-Day/24hour:Minute:Second
Use         log file : /opt/test.log
Use         encoding : utf8


Results
=======

Failregex: 1 total
|-  #) [# of hits] regular expression
|   1) [1] ^\s*WARN .*? \[<HOST>\] (Неправильный пароль.|Wrong password.)$
`-

Ignoreregex: 0 total

Date template hits:
|- [# of hits] date format
|  [2] ^Month-Day/24hour:Minute:Second
`-

Lines: 2 lines, 0 ignored, 1 matched, 1 missed
[processed in 0.00 sec]

|- Matched line(s):
|  09-10/17:24:26 WARN admin [127.0.0.1] Wrong password.
`-
|- Missed line(s):
|  09-10/17:24:26 WARN admin [127.0.0.1] Неправильный пароль.
`-

Thanks in advance.

-- 
With regards,
Alexander
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users

Reply via email to