# Fail2Ban generic example resp. test filter 
#
# Author: Serg G. Brester (sebres)
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local.  common.conf is a symlink to the original common.conf and
# should be copied (dereferenced) during installation
before = ../../../../../../../config/filter.d/common.conf

[Definition]

_daemon = test-demo

failregex = ^%(__prefix_line)sF2B: failure from <HOST>$
            ^%(__prefix_line)sF2B: error from <HOST>$

# just to test multiple ignoreregex:
ignoreregex = ^%(__prefix_line)sF2B: error from 192.0.2.251$
              ^%(__prefix_line)sF2B: error from 192.0.2.252$

# specify only exact date patterns, +1 with %%Y to test usage of last known date by wrong dates like 0000-00-00...
datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)?
              {^LN-BEG}(?:%%a )?%%b %%d %%H:%%M:%%S(?:\.%%f)?(?: %%ExY)?
              {^LN-BEG}%%Y(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)?