mirror of
https://github.com/crowdsecurity/crowdsec.git
synced 2025-05-13 21:05:52 +02:00
4 lines
No EOL
189 B
Text
4 lines
No EOL
189 B
Text
# Remember, these can be multi-line events.
|
|
MCOLLECTIVE ., \[%{TIMESTAMP_ISO8601:timestamp} #%{POSINT:pid}\]%{SPACE}%{LOGLEVEL:event_level}
|
|
|
|
MCOLLECTIVEAUDIT %{TIMESTAMP_ISO8601:timestamp}: |