Squid custom regex to filter login failure

[Ilia]

I can share at last, for the future readers, the final regex to get failed logins when using Squid. Checked and working:

Code: Select all

/^\S+\s+\d+\s+(\S+)\s+(TCP_DENIED\/407)\s+\S+\s+\S+\s+\S+\s+(\w+)\s+\S+\s+text\/html/

Good luck!