This collection provides support for monitoring Technitium DNS server authentication failures and detecting brute force attacks.

• Parser: PintjesB/technitium-logs - Parses Technitium DNS server authentication failure logs
• Scenario: PintjesB/technitium-bf - Detects brute force attacks against Technitium DNS server web interface

The Technitium integration requires the following log acquisition configuration:

1filenames:
2  - /syslog-server/technitium.log
3labels:
4  type: technitium