Is this possible? CrowdSec doesn’t seem to be parsing my Authelia log from journald, and I wanted to try figuring out why, but it doesn’t look like there’s an option for explaining a journald log.
cscli explain --dsn "journalctl://filters=_SYSTEMD_UNIT=authelia.service" --type syslog
Journalctl acquisition has a DSN command which can be run by CrowdSec this is basically the same DSN that is exposed by cscli explain
This journactl will grab all logs so you can use other filters journalctl offers by tagging another &filters=<journalctl_filter> to get more refined results
1 Like