daviftorres commented on issue #13343: URL: https://github.com/apache/cloudstack/issues/13343#issuecomment-5047811874
Hey @DaanHoogland, thanks for commenting on this thread. I'm very familiar with Fail2Ban, but I don't use it with ACS because, with debug logging enabled (which is almost always required for troubleshooting), our four Management Server instances generate around 8~10 million log lines per day. It would be very helpful if authentication attempts were written to a separate log file, such as `/var/log/cloudstack/management/auth.log`. That would make Fail2Ban much more practical to use and would also reduce the amount of data that XDR/SIEM tools need to process. With the current log volume, it's simply not practical. Does that make sense? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
