From ac95449bbb9c46e879b33540885e7d77ecd01814 Mon Sep 17 00:00:00 2001 From: john Date: Sat, 30 Apr 2016 15:26:36 +1000 Subject: [PATCH] changed zoneminder regex as per Sebres and yarikoptic recommendations --- config/filter.d/zoneminder.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/filter.d/zoneminder.conf b/config/filter.d/zoneminder.conf index c804626e..aa3b4e6d 100644 --- a/config/filter.d/zoneminder.conf +++ b/config/filter.d/zoneminder.conf @@ -3,7 +3,7 @@ [Definition] -# pattern: [client 10.1.1.1:38022] WAR [Login denied for user "test"], referer: https://zoneminderurl/ +# pattern: [Wed Apr 27 23:12:07.736196 2016] [:error] [pid 2460] [client 10.1.1.1:47296] WAR [Login denied for user "test"], referer: https://zoneminderurl/index.php # # # Option: failregex @@ -13,7 +13,7 @@ # (?:::f{4,6}:)?(?P[\w\-.^_]+) -failregex = ^.*? [[]client :\d\d\d\d\d] WAR [[]Login denied for user \S*], referer: \S*$ +failregex = ^\[\](?: \[:error\])?(?: \[pid \d+\])? \[client :\d+\] WAR \[Login denied for user "[^"]*"\] ignoreregex =