cscli parsers install gilbsgilbs/qbittorrent-logsQBittorrent authentication failure parser.
Supports default QBittorent's log format.
1onsuccess: next_stage2name: gilbsgilbs/qbittorrent-logs3description: "Parse QBittorrent logs"4filter: "evt.Parsed.program == 'qbittorrent'"5nodes:6 - grok:7 # (W) 2024-11-26T13:56:41 - WebAPI login failure. Reason: invalid credentials, attempt count: 1, IP: b8ae:97b8:322f:20c6:c704:6441:0fbd:b782, username: someuser8 # (W) 2024-11-26T13:37:27 - WebAPI login failure. Reason: IP has been banned, IP: b8ae:97b8:322f:20c6:c704:6441:0fbd:b782, username: someuser9 pattern: >-10 \(%{WORD:log_level}\) %{TIMESTAMP_ISO8601:timestamp}11 - WebAPI login failure. Reason: %{GREEDYDATA:reason},12 IP: %{IP:source_ip},13 username: %{USERNAME:username}14 apply_on: message15 statics:16 - meta: log_type17 value: qbittorrent_failed_auth18 - meta: user19 expression: evt.Parsed.username20statics:21 - meta: service22 value: qbittorrent23 - meta: source_ip24 expression: evt.Parsed.source_ip25 - target: evt.StrTime26 expression: evt.Parsed.timestamp27