Thanks for the response, I had posted same question on github, and it seems fail2ban has few IDs to match on actions.. The log line it is "<matches>" which serve my purpose..
More details here https://github.com/fail2ban/fail2ban/issues/3002 Thanks again. Regards On 04/14/2021 07:03 PM, maillist.fail2...@mail.heirich.name wrote: > na...@otenet.gr wrote: > >> but I want on action beside the ban ip, to send also corresponding log line > i've made something looks alike. > > However, all bans are recorded in /var/lib/fail2ban/fail2ban.sqlite3 > > try sqlite3 /var/lib/fail2ban/fail2ban.sqlite3 "SELECT * FROM bans;" > > timestamp is in field timeofban as usual unix date. > > IIRC <time> could be used in action etc., but is seconds since january 1st > 1970. > > regards Peter > PS: sorry sent twice, From: doesn't matched mailinglist filter _______________________________________________ Fail2ban-users mailing list Fail2ban-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/fail2ban-users
