# Crowdsecurity/http-logs debug

**URL:** <https://discourse.crowdsec.net/t/crowdsecurity-http-logs-debug/1781>\
**Category:** crowdsec\
**Created:** [April 23, 2024, 5:05pm UTC](https://discourse.crowdsec.net/t/crowdsecurity-http-logs-debug/1781 "2024-04-23T17:05:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lordspart](https://avatars.discourse-cdn.com/v4/letter/l/97f17d/32.png) [@lordspart](https://discourse.crowdsec.net/u/lordspart)\
**Post date:** [April 23, 2024, 5:05pm UTC](https://discourse.crowdsec.net/t/crowdsecurity-http-logs-debug/1781/1 "2024-04-23T17:05:35Z")

</div>

Constanty seeing this in my crowdsec.log as debug and don’t know what to do about it. It is when i go to all of my proxied websites that i use connected to a cloudfare tunnel / authelia /traefik. My links work and i tested it blocking ips which it does so idk.

time=“2024-04-23T11:51:11-05:00” level=debug msg=“dbg(result=false): evt.Meta.service == ‘http’ and evt.Meta.log\_type in [‘http\_access-log’, ‘http\_error-log’] and evt.Meta.http\_status in [‘404’, ‘403’] and Lower(evt.Meta.http\_path) contains "/wp-" and Lower(evt.Meta.http\_path) endsWith ".php"” cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [== ‘http’] "http" == "http" → [true]" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [and] AND → true" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [in [‘http\_access-log’, ‘http\_error-log’]] "http\_access-log" in map[http\_access-log:{} http\_error-log:{}] → [true]" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [and] AND → true" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [in [‘404’, ‘403’]] "403" in map[403:{} 404:{}] → [true]" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [and] AND → true" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [Lower(evt.Meta.http\_path)] Lower("/?rd=https%3A%2F%2Fredated…") = "/?rd=https%3a%2f%2fmoviesearch…"" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [contains "/wp-"] "/?rd=https%3a%2f%2fmoviesearch…" contains "/wp-" → [false]" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=" [and] AND → false" cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

time=“2024-04-23T11:51:11-05:00” level=debug msg=“Event leaving node : ko (filter mismatch)” cfg=silent-resonance name=crowdsecurity/http-wordpress-scan

 ![parse 2](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/2f02762f3fdcbe5c5ceac5e748fd8d37e116b3a1.png)

---

<div class="post-metadata">

**Author:** ![lordspart](https://avatars.discourse-cdn.com/v4/letter/l/97f17d/32.png) [@lordspart](https://discourse.crowdsec.net/u/lordspart)\
**Post date:** [April 23, 2024, 5:19pm UTC](https://discourse.crowdsec.net/t/crowdsecurity-http-logs-debug/1781/2 "2024-04-23T17:19:59Z")

</div>

![parse1](https://europe1.discourse-cdn.com/flex013/uploads/crowdsec/original/1X/ffcc650e328f6ce0dbd67aa53c8bbd3a6b8e5c16.png)

---

<div class="post-metadata">

**Author:** ![lordspart](https://avatars.discourse-cdn.com/v4/letter/l/97f17d/32.png) [@lordspart](https://discourse.crowdsec.net/u/lordspart)\
**Post date:** [April 24, 2024, 8:07pm UTC](https://discourse.crowdsec.net/t/crowdsecurity-http-logs-debug/1781/3 "2024-04-24T20:07:21Z")

</div>

Edit Solved … For anyone that runs into this in the future. I uninstalled and reinstalled crowdsec but didnt work. I though i deleted all configs on unistall but maybe i didnt folders were still there. The fix for me was uninstalling the paser. “cscli parsers remove crowdsecurity/http-logs --force”. Then reinstalling “cscli parsers install crowdsecurity/http-logs”. Link to docs [cscli parsers remove | CrowdSec](https://docs.crowdsec.net/docs/next/cscli/cscli_parsers_remove/). Sorry for this post i spent a whole day trying to fix it and i felt like it was unsolvable but definitely was an easy fix.