Re: Squid custom regex to filter login failure
Posted: 18 Feb 2014, 19:24
I can share at last, for the future readers, the final regex to get failed logins when using Squid. Checked and working:
Good luck!
Code: Select all
/^\S+\s+\d+\s+(\S+)\s+(TCP_DENIED\/407)\s+\S+\s+\S+\s+\S+\s+(\w+)\s+\S+\s+text\/html/