cscli parsers install LearningSpot/litellm-logsParser for Litellm Logs with Docker.
1---2source: docker3container_name:4 - litellm_container_name5labels:6 type: litellm
1name: LearningSpot/litellm-logs2description: "Parse Litellm login logs"3filter: "evt.Parsed.program == 'litellm'"4onsuccess: next_stage5nodes:6 - grok:7 pattern: 'INFO:%{SPACE}%{IP:source_ip}:%{INT} - "%{WORD:method} %{DATA:query} %{URIPROTO}/%{NUMBER:http_version}" %{NUMBER:status} Unauthorized'8 apply_on: message9 statics:10 - meta: log_type11 value: litellm_failed_auth12statics:13 - meta: service14 value: litellm15 - target: source_ip16 expression: evt.Parsed.source_ip17 - meta: status18 expression: evt.Parsed.status19