Home assistant logs not parsed

1

Hi,

I installed the home assistant add-on, but the logs are not parsed, and it ignores failed logins or banned IP’s

image
image2492×1092 282 KB

Also tried to cscli explain the logs directly but this does not seem to parse

Screenshot at Sep 07 16-35-57
Screenshot at Sep 07 16-35-572461×439 96.6 KB

Configuration is default.

Any idea where to start?

Thanks
Kris

2

Found the problem. The log format has been changed, they included a Request URL.

Changing the grok pattern in the parser fixed it for the failed logons

From:

pattern: “%{TIMESTAMP:time} WARNING \(%{DATA:threadName}\) \[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from %{DATA:source_rdns} \(%{IPORHOST:source_ip}\). \(%{GREEDYDATA:http_user_agent}\)”

To:

pattern: “%{TIMESTAMP:time} WARNING \(%{DATA:threadName}\) \[homeassistant.components.http.ban\] Login attempt or request with invalid authentication from %{DATA:source_rdns} \(%{IPORHOST:source_ip}\). Requested URL: %{GREEDYDATA:request_uri}\. \(%{GREEDYDATA:http_user_agent}\)”

3

Has this been updated or do I still need to modify the file since I grabbed those from CrowdSec Hub?

4

This has been fixed and available from the hub

cscli hub update
cscli hub upgrade