Warning in log msg="while configuring datasource : empty filename(s) and journalctl filter, malformed datasource"

1 
time="18-03-2021 22:36:53" level=info msg="loading acquisition file : /etc/crowdsec/acquis.yaml"
time="18-03-2021 22:36:53" level=info msg="[file datasource] opening file '/var/log/secure'"
time="18-03-2021 22:36:53" level=info msg="[file datasource] opening file '/var/log/messages'"
time="18-03-2021 22:36:53" level=info msg="[file datasource] opening file '/var/log/maillog'"
time="18-03-2021 22:36:53" level=warning msg="while configuring datasource : empty filename(s) and journalctl filter, malformed datasource"

The three datasource files all exist and contain content. Why the warning?

2

Hello,

The warning message is harmless … it is because there is an empty item in the yaml file.

I’ve opened an issue to keep track of this and fix it

1 Like