journalmatch isn't in filter definition

  • Resolved genebean

    (@genebean)


    9 years, 3 months ago

    I just added this to my server and saw a error in my fail2ban.log saying

    015-11-22 05:30:37,965 fail2ban.filtersystemd [24816]: NOTICE Jail started without 'journalmatch' set. Jail regexs will be checked against all journal entries, which is not advised for performance reasons.

    I think this can be resolved by adding the following to filter.d/wordpress.conf but am not totally sure and would like your help please:

    [Init]
journalmatch = _SYSTEMD_UNIT=fail2ban.service

    This is on CentOS 7. Thanks!

    https://www.ads-software.com/plugins/wp-fail2ban/

Viewing 1 replies (of 1 total)
  • Thread Starter genebean

    (@genebean)

    So… adding this makes the bans not work. I made it work again by removing these lines and adding a backend = auto to the config file so that it doesn’t use the systemd backend. Seeing as the log lines do show up in the journal it would be nice to figure out how to make this play nice with it. Regardless, this is an awesome plugin and thank you!

Viewing 1 replies (of 1 total)
  • The topic ‘journalmatch isn't in filter definition’ is closed to new replies.