From 9d2cd58f31d80e4d598db8045e467ee20d66d6d5 Mon Sep 17 00:00:00 2001 From: Cristian Nitescu Date: Fri, 24 Sep 2021 10:49:49 +0200 Subject: [PATCH] #975 Mysql default parser: parse also lines with using password NO (#976) --- config/patterns/mysql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/patterns/mysql b/config/patterns/mysql index ab33fd8b5..141a0c04c 100644 --- a/config/patterns/mysql +++ b/config/patterns/mysql @@ -1 +1 @@ -MYSQL_AUTH_FAIL %{TIMESTAMP_ISO8601:time} %{NUMBER} \[Note\] Access denied for user '%{DATA:user}'@'%{IP:source_ip}' \(using password: YES\) +MYSQL_AUTH_FAIL %{TIMESTAMP_ISO8601:time} %{NUMBER} \[Note\] Access denied for user '%{DATA:user}'@'%{IP:source_ip}' \(using password: %{WORD:using_password}\)