From e134e2c9ce7516bbf851b3cddc3b93c6ddbb9da4 Mon Sep 17 00:00:00 2001 From: ppom <> Date: Sun, 19 Mar 2023 23:09:59 +0100 Subject: [PATCH] uniform cdc --- cdc.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/cdc.md b/cdc.md index ed4148b..806de88 100644 --- a/cdc.md +++ b/cdc.md @@ -10,13 +10,14 @@ actions: regexes: IP: '(([0-9]{1,3}\.){3}[0-9]{1,3})|([0-9a-fA-F:]{2,90})' + streams: nextcloud: - command: journalctl -fu phpfpm-nextcloud.service + cmd: journalctl -fu phpfpm-nextcloud.service actions: - regex: '"message":"Login failed: .\+ (Remote IP: \(?[0-9a-fA-F.:]\+\))"' # Can also be a list - do: iptables -I f2b-nextcloud 1 -s -j + cmd: iptables -I f2b-nextcloud 1 -s -j ``` reactionc: le client