amiracle / homemonitor

Splunk app for home | monitor >
25 stars 5 forks source link

Update props.conf #13

Closed TokenSolution closed 7 years ago

TokenSolution commented 7 years ago

pfsense openvpn sessions no longer in openvpn logs (or because tun vs tap?) Fields to be extracted from relevant line: auth_user,src_ip_openvpn,src_port_openvpn ^[^]\n]*]:\s+(?P\w+)/(?P[^:]+):(?P\d+)