cscli parsers install LePresidente/overseerr-logsParser for Overseerr Logs.
1---2source: docker3container_name:4 - overseerr5#container_id:6# - 843ee92d231b7labels:8 type: overseerr
1onsuccess: next_stage2#debug: false3name: LePresidente/overseerr-logs4description: "Parse Overseerr logs"5filter: "evt.Parsed.program == 'overseerr'"6pattern_syntax:7 OVERSEERR_CUSTOMUSER: "(%{EMAILADDRESS}|%{USERNAME})"8nodes:9 - grok:10 pattern: '(%{RFC3339:timestamp})?.*Failed sign-in attempt using invalid .* password.*{"ip":"::ffff:%{IP:source_ip}","email":"%{OVERSEERR_CUSTOMUSER:username}"}'11 apply_on: message12 statics:13 - meta: log_type14 value: overseerr_failed_auth15 - grok:16 pattern: '(%{RFC3339:timestamp})?.*Failed login attempt from user with incorrect.*credentials {"account":{"ip":"::ffff:%{IP:source_ip}","email":"%{OVERSEERR_CUSTOMUSER:username}","password":"__REDACTED__"}}'17 apply_on: message18 statics:19 - meta: log_type20 value: overseerr_failed_auth21 - grok:22 pattern: '(%{RFC3339:timestamp})?.*Failed sign-in attempt using invalid .* password.*{"ip":"%{IP:source_ip}","email":"%{OVERSEERR_CUSTOMUSER:username}"}'23 apply_on: message24 statics:25 - meta: log_type26 value: overseerr_failed_auth27 - grok:28 pattern: '(%{RFC3339:timestamp})?.*Failed login attempt from user with incorrect.*credentials {"account":{"ip":"%{IP:source_ip}","email":"%{OVERSEERR_CUSTOMUSER:username}","password":"__REDACTED__"}}'29 apply_on: message30 statics:31 - meta: log_type32 value: overseerr_failed_auth3334statics:35 - meta: service36 value: overseerr37 - meta: source_ip38 expression: "evt.Parsed.source_ip"39 - meta: user40 expression: "evt.Parsed.username"41 - target: evt.StrTime42 expression: evt.Parsed.timestamp43