# Fail2ban logs not showing up

**URL:** <https://community.graylog.org/t/fail2ban-logs-not-showing-up/18302>\
**Category:** Graylog Add-ons\
**Created:** [December 23, 2020, 6:41pm UTC](https://community.graylog.org/t/fail2ban-logs-not-showing-up/18302 "2020-12-23T18:41:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![olliedog](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/olliedog/32/7717_2.png) [@olliedog](https://community.graylog.org/u/olliedog)\
**Post date:** [December 23, 2020, 6:41pm UTC](https://community.graylog.org/t/fail2ban-logs-not-showing-up/18302/1 "2020-12-23T18:41:13Z")

</div>

Hi,  
bit confused as to how to use the fail2ban content pack, very new to GreyLog.

Ive watched videos, and read the help files on GreyLog website, but can’t find the right info I need to understand how to set this up correctly.but content does not help

Ive installed it all ok, I’ve added

[Definition]  
logtarget = SYSLOG  
to jail.local to direct the logs to the syslog for collection, as directed in another post

I have added the following to /etc/rsyslog.conf

_._ @:1514;RSYSLOG\_SyslogProtocol23Format  
_._ @@:1514;RSYSLOG\_SyslogProtocol23Format

And tcp and udp messages are present when checking show received messages.

Firewall setup ok, selinux temporary in permissive mode.

Im doing something wrong, but don’t know what, I also don’t know hoe to use the grok\_patterns in the entity list.

Can someone point me in the correct direction, current version being used is Greylog 4.0

Thanks, Ollie

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [January 6, 2021, 6:41pm UTC](https://community.graylog.org/t/fail2ban-logs-not-showing-up/18302/2 "2021-01-06T18:41:23Z")

</div>

Closed on January 6, 2021, 6:41pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
