I made another posting a few minutes ago regarding an error when using cscli explain.
Since executing that command I can no longer restart crowdsec
When I type ‘journalctl -xe’ I get
-- Unit crowdsec.service has begun starting up. May 25 09:19:54 integra-nginx crowdsec: time="25-05-2022 09:19:54" level=fatal msg="Error decoding parsing configuration file '/etc/crowdsec/parsers/s02-enrich/parser-dump.yaml': yaml: unmarshal errors:\n line 1: field s00-raw n May 25 09:19:54 integra-nginx systemd: crowdsec.service: Control process exited, code=exited status=1 May 25 09:19:54 integra-nginx systemd: crowdsec.service: Failed with result 'exit-code'. May 25 09:19:54 integra-nginx systemd: Failed to start Crowdsec agent. -- Subject: Unit crowdsec.service has failed
the file ‘/etc/crowdsec/parsers/s02-enrich/parser-dump.yaml’’ contains the lines I have been trying to analyze using cscli explain.
Since I didn’t generate this file I assume that cscli explain writes entries to it, but they appear to be incorrectly written and generate an error on startup.
I can wipe the file or I can leave it blank.
Whats the recommended course of action? Is this a bug I should report or have I done something incorrectly?