Thanks so much. I didn't want to study the regex in depth. Good life.
last help: 89.248.168.108 - - [10/Feb/2021:08:50:21 +0100] "HEAD / HTTP/1.0" 301 0 "-" "-" 177.152.152.37 - - [10/Feb/2021:10:56:58 +0100] "GET / HTTP/1.1" 404 580 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 185.239.242.198 - - [10/Feb/2021:11:41:09 +0100] "GET / HTTP/1.0" 404 152 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.248.168.108 - - [10/Feb/2021:11:41:24 +0100] "" 400 0 "-" "-"...
last help: 89.248.168.108 - - [10/Feb/2021:08:50:21 +0100] "HEAD / HTTP/1.0" 301 0 "-" "-" 177.152.152.37 - - [10/Feb/2021:10:56:58 +0100] "GET / HTTP/1.1" 404 580 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 185.239.242.198 - - [10/Feb/2021:11:41:09 +0100] "GET / HTTP/1.0" 404 152 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:76.0) Gecko/20100101 Firefox/76.0" 89.248.168.108 - - [10/Feb/2021:11:41:24 +0100] "" 400 0 "-" "-"...
IT ALSO WORKS: failregex = ^.*login failure.*ip_address: "<HOST>" it is OK? Thanks!
IT ALSO WORKS: failregex = ^.*login failure.'ip_address: "<HOST>" it is OK? Thanks!
IT ALSO WORKS: failregex = ^.''login failure.''ip_address: "<host>" it is OK? Thanks!</host>
IT ALSO WORKS: failregex = ^.login failure.ip_address: "<host>" it is OK? Thanks!</host>
IT ALSO WORKS: failregex = ^.login failure.ip_address: "<host>" it is OK? Thanks!</host>