Nginx Mail collection

A collection for Nginx mail proxy

• Nginx Mail core module log parsers
• Nginx Mail auth module scenario bruteforce spam attempt

It is recommended having the crowdsecurity/nginx collection installed!

Contribution by https://github.com/hitech95

Acquisition template

Example acquisition for this collection :

1filenames:
2  - /var/log/nginx/*.log
3  - ./tests/nginx/nginx.log
4#this is not a syslog log, indicate which kind of logs it is
5labels:
6  type: nginx

If you are running Nginx inside docker, like mailu:

1---
2source: docker
3container_name: 
4 -  mailu-front
5labels:
6  type: nginx

notes :

• Depending on your distribution/OS, paths to log files might change
• Only relevant if you are manually installing collection