From 680c5c14ac63f79b710bed6e1ac3ac602b0891c4 Mon Sep 17 00:00:00 2001 From: FaricaUnknown <64791077+FaricaUnknown@users.noreply.github.com> Date: Wed, 8 Jul 2020 10:43:16 +0200 Subject: [PATCH] give a warning in documentation if syslog-logs parser is missing (#120) --- docs/write_configurations/parsers.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/write_configurations/parsers.md b/docs/write_configurations/parsers.md index 593009ba2..ed5917eb1 100644 --- a/docs/write_configurations/parsers.md +++ b/docs/write_configurations/parsers.md @@ -3,6 +3,12 @@ !!! info Please ensure that you have working env or setup test environment before writing your parser. +!!! warning "Parser dependency" + +The crowdsecurity/syslog-logs parsers is needed by the core parsing +engine. Deletion or modification of this could result of {{crowdsec.name}} +being unable to parse logs, so this should be done very carefully. + > In the current example, we'll write a parser for the logs produced by `iptables` (netfilter) with the `-j LOG` target. > This document aims at detailing the process of writing and testing new parsers. @@ -410,4 +416,4 @@ statics: - meta: http_path expression: "evt.Parsed.request" ``` - --> \ No newline at end of file + -->