cscli collections install crowdsecurity/kasm
This collection add parser support for kasm json log output, also a base scenario to detect bruteforce login attempts.
1filenames:2 - /opt/kasm/current/log/api_server_json.log3labels:4 type: kasm