cscli parsers install timokoessler/uptime-kuma-logsParser for Uptime Kuma Logs.
Uptime Kuma version 1.15.0 or higher is required.
Example acquisition for Docker:
1---2source: docker3container_name:4 - my_container_name5labels:6 type: uptime-kuma
1onsuccess: next_stage2filter: "Upper(evt.Parsed.program) == 'UPTIME-KUMA'"3name: timokoessler/uptime-kuma-logs4description: "Parse Uptime Kuma Logs"5nodes:6 - grok:7 pattern: '^%{TIMESTAMP_ISO8601:timestamp} \[AUTH\] WARN: Incorrect username or password for user %{DATA:username}\. IP=%{IP:source_ip}$'8 apply_on: message9 statics:10 - meta: log_type11 value: uptime_kuma_failed_password12 - grok:13 pattern: '^%{TIMESTAMP_ISO8601:timestamp} \[AUTH\] WARN: Invalid token provided for user %{DATA:username}\. IP=%{IP:source_ip}$'14 apply_on: message15 statics:16 - meta: log_type17 value: uptime_kuma_failed_totp1819statics:20 - meta: service21 value: uptime-kuma22 - meta: source_ip23 expression: "evt.Parsed.source_ip"24 - target: evt.StrTime25 expression: "evt.Parsed.timestamp"26 - meta: username27 expression: evt.Parsed.username28