Skip to content

[HELP] Crowdsec needs live logs? #648

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Iaskweirdquestions opened this issue Apr 27, 2025 · 3 comments
Open

[HELP] Crowdsec needs live logs? #648

Iaskweirdquestions opened this issue Apr 27, 2025 · 3 comments
Labels
help wanted Extra attention is needed

Comments

@Iaskweirdquestions
Copy link

I am pretty new to the whole selfhosting thing and try to learn, so I might not know all technical terms for everything, but I watched and read some documentation about setting up crowdsec to secure my network a bit more. To my understanding I have a scanner running on my host system that reads my logs and then marks potential requests ro ban them on my machines firewall or even directly on cloudflare level (which I plan on doing). To my understanding I need crowdsec to read my zoraxy logs in order to do that. However does zoraxy store a livelog anywhere? Because looking in the logs folder in my zoraxy folder I can only find backups of each month. Is there any option or location that gives me an up to date log file that I can feed crowdsec in order to be more secure?

@Iaskweirdquestions Iaskweirdquestions added the help wanted Extra attention is needed label Apr 27, 2025
@tobychui
Copy link
Owner

@Iaskweirdquestions For starter, I guess instead of tinkering with tools like Crowdsec, it would be just easier to setup a VPN (e.g. openvpn or wireguard) and do everything in your VPN network.

For your question, the latest monthly logs file is the real time logs. Zoraxy cycles them automatically and create a new one once every month. Just open the latest log file (with the current month name I presume) and you will see Zoraxy constantly flushing new log lines into it.

@Iaskweirdquestions
Copy link
Author

For my usecase to use a VPN does absolutely not make sense no. Since I also don't expect anything to run perfectly smooth without any problems I prefer the learning part more than the actuall "need" part.

That was already what I kinda assumed, but with this I probably have to create a script then. Would be nice to have active logs that won't change the name all the time, but can definitely be worked with!

@Raithmir
Copy link
Contributor

Raithmir commented May 1, 2025

@Iaskweirdquestions there's discussion over here on getting Crowdsec to work with Zoraxy. #338

I've submitted a pull request to Crowdsec to add a new collection/parser for Zoraxy, but you can configure manually for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

3 participants