Hi, I am encountering a bit of a hassle considering the logging system. I use the guacamole/guacamole docker image, with guacd and postgres as db, I followed the general guidelines so nothing outstanding in my setup. However the logging system in docker outputs things that does not appear in catalina*.log, and I am trying to use fail2ban with the said logs.
Specifically, I would like to get the line saying : 18:24:18.755 [http-nio-8080-exec-3] INFO o.a.g.r.auth.AuthenticationService - User "xxx" successfully authenticated from [[user ip], [container ip]]. It appears when doing sudo docker logs guacamole It does not appear in catalina*.log as said before. I noticed that the way it is logged is different than, per say : 05-Aug-2021 17:41:16.672 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 5067 ms ( for instance : no date, only time in auth log ) So it must be using a different parsing system, so I tried setting a logback.xml in GUACAMOLE_HOME in order to change what to parse into the log but it seems it is not used since the modifications I made were not seen in the logs after guacamole restarted. Is anyone struggling with this as well ? Have I missed something ( not too terribly I hope ) obvious ? Thanks in advance for your help, Good day to you all
