Ignore `already banned` message.

2020-09-26 17:08:05 +09:00 · 2020-09-26 17:08:05 +09:00 · 9bf98f1d20
parent 3180a21533
commit 9bf98f1d20
1 changed files with 1 additions and 1 deletions
--- a/cookbooks/promtail/templates/etc/promtail/base.yaml
+++ b/cookbooks/promtail/templates/etc/promtail/base.yaml
@ -163,7 +163,7 @@ scrape_configs:

    pipeline_stages:
    - match:
-        selector: '{job="fail2ban"}'
+        selector: '{job="fail2ban"} !~ "already banned"'
        stages:
        - regex:
            expression: '^(?P<timestamp>[0-9]+\-[0-9]+\-[0-9]+ [0-9]+:[0-9]+:[0-9]+),[0-9]+ [^:]+: (?P<level>[^ ]+)[^\[]+(?P<message>.+)$'