9 lines
388 B
Text
9 lines
388 B
Text
# Fail2Ban filter for Grafana
|
|
# Detecting unauthorized access
|
|
# Typically logged in /var/log/grafana/grafana.log
|
|
|
|
[Init]
|
|
datepattern = ^t=%%Y-%%m-%%dT%%H:%%M:%%S%%z
|
|
|
|
[Definition]
|
|
failregex = ^(?: lvl=err?or)? msg="Invalid username or password"(?: uname=(?:"<F-ALT_USER>[^"]+</F-ALT_USER>"|<F-USER>\S+</F-USER>)| error="<F-ERROR>[^"]+</F-ERROR>"| \S+=(?:\S*|"[^"]+"))* remote_addr=<ADDR>$
|