Results 1 to 3 of 3

Thread: fail2ban & journalctl

  1. #1

    Default fail2ban & journalctl

    I noticed that the fail2ban jail.conf file has several lines with "/var/log/messages" on them. However, this is no longer there with journalctl replacing it.

    Has someone figured out how to setup fail2ban to work with journalctl?

    Any help appreciated.

  2. #2
    Join Date
    Oct 2009
    Location
    Sweden
    Posts
    1,015

    Default Re: fail2ban & journalctl

    Quote Originally Posted by Reg_gie View Post
    I noticed that the fail2ban jail.conf file has several lines with "/var/log/messages" on them. However, this is no longer there with journalctl replacing it.

    Has someone figured out how to setup fail2ban to work with journalctl?

    Any help appreciated.
    I running fail2ban on 2 openSUSE 13.1_64 servers. I have both fail2ban and messages files in my /var/log/ directory. I have never used journalctl other then check if fail2ban is running and error messages. But that’s me .


    regards
    I'm shameless like others in the forum -was I to any help or made sense? If yes: click the on the star below to the left. Written whit a ;-) in my eye.

  3. #3
    Join Date
    May 2012
    Location
    Finland
    Posts
    2,004

    Default Re: fail2ban & journalctl

    You'll need to upgrade to Fail2ban 0.9.1 from the OBS ( https://software.opensuse.org/package/fail2ban ) and then just change backend = auto in your jail.conf to backend = systemd and it'll read it directly from the journal.

    0.8.x that ships with 13.2 does not support systemd log parsing.
    .: miuku #suse @ irc.freenode.net
    :: miuku@opensuse.org

    .: h​ttps://download.opensuse.org/repositories/home:/Miuku/

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •