thomas/multiarch-docker-images
1
0
Fork 0
mirror of https://github.com/napnap75/multiarch-docker-images.git synced 2026-09-25 20:31:52 +02:00
Code Issues Projects Releases Wiki Activity

Split configuration to manage different time format

Browse Source
This commit is contained in:
thomas
2026-09-08 23:27:48 +02:00
committed by GitHub
parent f4c2628e0c
commit 701b5b077f
1 changed files with 39 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
log-alert/config.json
+38 -2
View File
@@ -58,14 +58,15 @@
"message": "New SSH login for {username} on {hostname} from ip {ip} (country: {country}, provider: {isp}, method: {method})" "message": "New SSH login for {username} on {hostname} from ip {ip} (country: {country}, provider: {isp}, method: {method})"
} }
}, },
"ssh-local": { "ssh-local-fileserver": {
"check-interval": 30, "check-interval": 30,
"log-fetcher": { "log-fetcher": {
"name": "parseable", "name": "parseable",
"filters": { "filters": {
"labels": { "labels": {
"filename": "/var/log/host/auth.log", "filename": "/var/log/host/auth.log",
"process": "sshd" "process": "sshd",
"hostname": "fileserver"
}, },
"text": "Accepted" "text": "Accepted"
} }
@@ -91,6 +92,41 @@
"title": "Local SSH login", "title": "Local SSH login",
"message": "New SSH login for {username} on {hostname} from ip {ip} (method: {method})" "message": "New SSH login for {username} on {hostname} from ip {ip} (method: {method})"
} }
},
"ssh-local-webserver": {
"check-interval": 30,
"log-fetcher": {
"name": "parseable",
"filters": {
"labels": {
"filename": "/var/log/host/auth.log",
"process": "sshd",
"hostname": "webserver"
},
"text": "Accepted"
}
},
"filters": [
{
"type": "timestamp",
"config": {
"source-field": "timestamp",
"timezone": "Europe/Paris",
"timestamp-format": "%Y-%m-%dT%H:%M:%S.%f"
}
},
{
"type": "regexp",
"config": {
"match": "Accepted (?P<method>\\w+) for (?P<username>\\w+) from (?P<ip>[^\\s]+)"
}
}
],
"alerter": {
"name": "gotify",
"title": "Local SSH login",
"message": "New SSH login for {username} on {hostname} from ip {ip} (method: {method})"
}
} }
} }
} }