[Definition] # Matches failed login attempts recorded by the bespoke dashboard auth logger. failregex = ^\[\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\]\s\[[^\]]+\]\s\[auth\]\sFailed login attempt for username '[^']+' from IP (?: \([^)]+\))?$ ignoreregex = [Init] # Tell fail2ban how timestamps are structured in `dashboard.log` entries. datepattern = ^\[%%Y-%%m-%%d %%H:%%M:%%S\]