cscli parsers install LePresidente/emby-logsParser for emby Logs.
1---2filenames:3 - /var/log/embyserver.txt4labels:5 type: emby
1onsuccess: next_stage2#debug: false3name: LePresidente/emby-logs4description: "Parse emby logs"5filter: "evt.Parsed.program == 'emby'"6nodes:7 - grok:8 pattern: '%{TIMESTAMP_ISO8601:timestamp}.*?AUTH-ERROR: %{IP:source_ip} - Invalid username or password entered\.$'9 apply_on: message10 statics:11 - meta: log_type12 value: emby_failed_auth1314statics:15 - meta: service16 value: emby17 - meta: source_ip18 expression: "evt.Parsed.source_ip"19 - target: evt.StrTime20 expression: evt.Parsed.timestamp