Hi everybody!
I’m very n00b in crowdsec.
When I do : cscli explain --file /var/log/apache2/*.log --type apache2
- : whatever log I parse is on failure !
Eg :
cscli explain --file /var/log/apache2/system-linux.fr.error.log --type apache2
WARN Line 0/2 is missing evt.StrTime. It is most likely a mistake as it will prevent your logs to be processed in time-machine/forensic mode.
WARN Line 1/2 is missing evt.StrTime. It is most likely a mistake as it will prevent your logs to be processed in time-machine/forensic mode.
line: [Wed Jul 24 07:19:42.395206 2024] [ssl:warn] [pid 1324956:tid 1324956] AH01909: system-linux.fr:443:0 server certificate does NOT include an ID which matches the server name
├ s01-parse
| └ 
crowdsecurity/apache2-logs
└-------- parser failure
I don’t understand why?
I change Formatlog : combine to common : but failed again…
Someone to help me?