cscli parsers install crowdsecurity/pkexec-logs1onsuccess: next_stage2#debug: true3filter: "evt.Parsed.program == 'pkexec'"4name: crowdsecurity/pkexec-logs5description: "Parse pkexec logs specifically for CVE-2021-4034"6pattern_syntax:7 PWNKIT_XPL: '%{DATA:user}: The value for the SHELL variable was not found the /etc/shells file'8grok:9 name: "PWNKIT_XPL"10 apply_on: message11statics:12 - meta: log_type13 value: CVE-2021-4034-xpl14 - meta: target_user15 expression: "evt.Parsed.user"16