How to use with journald

WP fail2ban Support
1

Hello,

I installed the plugin but I can’t find any logs.

I run debian 13 with journald, and did not find any wordpress entry with journalctl

Thanks

2

I’ve been able to see logs with journalctl SYSLOG_IDENTIFIER=wordpress :

Nov 20 13:41:28 xxx wordpress[907]: Authentication attempt for unknown user administrator from 62.60.130.228

But it’s never detected.
This regexp is in my wordpress-soft.conf :
^%(__prefix_line)sAuthentication attempt for unknown user .* from $

I don’t understand why it does not catch it

fail2ban-regex systemd-journal wordpress-soft -D

Running tests

Use jail : wordpress-soft
Use datepattern : {^LN-BEG} : Default Detectors
Use systemd journal
Use encoding : UTF-8
Use journal match : SYSLOG_IDENTIFIER=wordpress

Results

Failregex: 0 total

Ignoreregex: 0 total

Date template hits:

Lines: 0 lines, 0 ignored, 0 matched, 0 missed
[processed in 0.00 sec]