enhancement: dovecot imap login attempts

crowdsecurity / hub

Main repository for crowdsec scenarios/parsers

161 stars 150 forks source link

Nov 14 03:51:22 pop3-login: Info: Disconnected: Connection closed: read(size=988) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<shop@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<ZfpthtYmgKpXeHG9> Nov 14 04:05:12 pop3-login: Info: Disconnected: Connection closed: read(size=988) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<shop@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<0Cznt9YmesNXeHG9> Nov 14 04:19:01 pop3-login: Info: Disconnected: Connection closed: read(size=987) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<shop@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<apRS6dYmDNRXeHG9> Nov 14 04:32:52 pop3-login: Info: Disconnected: Connection closed: read(size=985) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<HtHZGtcmZrdXeHG9> Nov 14 04:46:43 pop3-login: Info: Disconnected: Connection closed: read(size=984) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<JgxfTNcmSKpXeHG9> Nov 14 05:00:33 pop3-login: Info: Disconnected: Connection closed: read(size=983) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<9vnXfdcmqOtXeHG9> Nov 14 05:14:21 pop3-login: Info: Disconnected: Connection closed: read(size=982) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<DAcvr9cmeqNXeHG9> Nov 14 05:27:26 pop3-login: Info: Disconnected: Connection closed: read(size=993) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<HLf/3dcmdrpXeHG9> Nov 14 05:40:49 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<dKXbDdgmCslXeHG9> Nov 14 05:54:35 pop3-login: Info: Disconnected: Connection closed: read(size=980) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<tiMWP9gm3r1XeHG9> Nov 14 06:08:22 pop3-login: Info: Disconnected: Connection closed: read(size=979) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<kGtfcNgmaMVXeHG9> Nov 14 06:22:15 pop3-login: Info: Disconnected: Connection closed: read(size=979) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<fbQJotgmXOVXeHG9> Nov 14 06:36:12 pop3-login: Info: Disconnected: Connection closed: read(size=982) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<p5js09gmNL9XeHG9> Nov 14 06:50:09 pop3-login: Info: Disconnected: Connection closed: read(size=985) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<s9PQBdkmTspXeHG9> Nov 14 07:04:07 pop3-login: Info: Disconnected: Connection closed: read(size=984) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<+UfAN9km0utXeHG9> Nov 14 07:08:29 pop3-login: Info: Disconnected: Connection closed: read(size=984) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<admin@.....>, method=PLAIN, rip=81.161.238.100, lip=1.2.3.4, session=<o7ZgR9km1NlRoe5k> Nov 14 07:08:50 pop3-login: Info: Disconnected: Connection closed: read(size=988) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<admin@.....>, method=PLAIN, rip=81.161.238.100, lip=1.2.3.4, session=<HEycSNkmKORRoe5k> Nov 14 07:18:03 pop3-login: Info: Disconnected: Connection closed: read(size=983) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<p1STadkmSJdXeHG9> Nov 14 07:31:58 pop3-login: Info: Disconnected: Connection closed: read(size=982) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<4RVXm9kmbuJXeHG9> Nov 14 07:45:52 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<odIQzdkmjstXeHG9> Nov 14 07:59:45 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=</C24/tkmgr1XeHG9> Nov 14 08:13:37 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<ZNxMMNomEMlXeHG9> Nov 14 08:27:32 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<CFAUYtomaK5XeHG9> Nov 14 08:41:25 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<w63Ak9ompptXeHG9> Nov 14 08:55:21 pop3-login: Info: Disconnected: Connection closed: read(size=981) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<6VCRxdomtrpXeHG9> Nov 14 09:09:12 pop3-login: Info: Disconnected: Connection closed: read(size=980) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<GyUV99omQKxXeHG9> Nov 14 09:23:02 pop3-login: Info: Disconnected: Connection closed: read(size=979) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<contact@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<P3OSKNsmippXeHG9>

# echo "Nov 14 03:51:22 pop3-login: Info: Disconnected: Connection closed: read(size=988) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<shop@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<ZfpthtYmgKpXeHG9>" | cscli explain -f- --type dovecot WARN Line 0/1 is missing evt.StrTime. It is most likely a mistake as it will prevent your logs to be processed in time-machine/forensic mode. line: Nov 14 03:51:22 pop3-login: Info: Disconnected: Connection closed: read(size=988) failed: Connection reset by peer (auth failed, 1 attempts in 2 secs): user=<shop@.....>, method=PLAIN, rip=87.120.113.189, lip=1.2.3.4, session=<ZfpthtYmgKpXeHG9> ├ s00-raw | ├ 🔴 crowdsecurity/syslog-logs | └ 🟢 crowdsecurity/non-syslog (+5 ~8) ├ s01-parse | ├ 🔴 crowdsecurity/apache2-logs | └ 🟢 crowdsecurity/dovecot-logs (+8 ~1) ├ s02-enrich | ├ 🔴 crowdsecurity/dateparse-enrich | ├ 🟢 crowdsecurity/geoip-enrich (+13) | ├ 🔴 crowdsecurity/http-logs | └ 🟢 crowdsecurity/whitelists (unchanged) ├-------- parser success 🟢 ├ Scenarios └ 🟢 crowdsecurity/dovecot-spam

# .... a ton more entries above WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:10+01:00] 11 existing buckets WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:11+01:00] 11 existing buckets WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:12+01:00] 11 existing buckets WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:13+01:00] 12 existing buckets WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:14+01:00] 13 existing buckets WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:15+01:00] 13 existing buckets WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:16+01:00] 13 existing buckets WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:17+01:00] 13 existing buckets WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:18+01:00] 13 existing buckets WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:19+01:00] 13 existing buckets WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:20+01:00] 13 existing buckets WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:21+01:00] 13 existing buckets WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:22+01:00] 13 existing buckets WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:23+01:00] 13 existing buckets WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:24+01:00] 13 existing buckets WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:25+01:00] 13 existing buckets WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:25+01:00] 15 existing buckets WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:26+01:00] 15 existing buckets WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:27+01:00] 17 existing buckets WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:29+01:00] 19 existing buckets WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:29+01:00] 19 existing buckets WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:30+01:00] 19 existing buckets WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:31+01:00] 20 existing buckets WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:32+01:00] 20 existing buckets WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:33+01:00] 23 existing buckets WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:34+01:00] 23 existing buckets WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:35+01:00] 23 existing buckets WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:36+01:00] 23 existing buckets WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:37+01:00] 23 existing buckets WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:38+01:00] 23 existing buckets WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:39+01:00] 23 existing buckets WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:40+01:00] 24 existing buckets WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:41+01:00] 24 existing buckets WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:42+01:00] 25 existing buckets WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:43+01:00] 25 existing buckets WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:44+01:00] 25 existing buckets WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:45+01:00] 25 existing buckets WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:46+01:00] 25 existing buckets WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam INFO[2024-11-14T10:36:47+01:00] 25 existing buckets WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam

I have added the logfile via:

crowdsec -dsn file:///var/log/dovecot.log -type dovecot -no-api

But it throws a lot of this messages and does not ban any ip.

WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam

# .... a ton more entries above
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:10+01:00] 11 existing buckets                          
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:10+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:11+01:00] 11 existing buckets                          
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:11+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:12+01:00] 11 existing buckets                          
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:12+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:13+01:00] 12 existing buckets                          
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:13+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:14+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:14+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:15+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:15+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:16+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:16+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:17+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:17+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:18+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:18+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:19+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:19+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:20+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:20+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:21+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:21+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:22+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:22+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:23+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:23+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:24+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:24+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:25+01:00] 13 existing buckets                          
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:25+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:25+01:00] 15 existing buckets                          
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:26+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:26+01:00] 15 existing buckets                          
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:27+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:27+01:00] 17 existing buckets                          
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:28+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:29+01:00] 19 existing buckets                          
WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:29+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:29+01:00] 19 existing buckets                          
WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:30+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:30+01:00] 19 existing buckets                          
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:31+01:00] 20 existing buckets                          
WARN[2024-11-14T10:36:31+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:32+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:32+01:00] 20 existing buckets                          
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:33+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:33+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:34+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:34+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:35+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:35+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:36+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:36+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:37+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:37+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:38+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:38+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:39+01:00] 23 existing buckets                          
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:39+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:40+01:00] 24 existing buckets                          
WARN[2024-11-14T10:36:40+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:41+01:00] 24 existing buckets                          
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:41+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:42+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:42+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:43+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:43+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:44+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:44+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:45+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:45+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:46+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:46+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
INFO[2024-11-14T10:36:47+01:00] 25 existing buckets                          
WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam
WARN[2024-11-14T10:36:47+01:00] Trying to process event without evt.StrTime. Event cannot be poured to scenario  evt_src=/var/log/dovecot.log evt_type=dovecot scenario=crowdsecurity/dovecot-spam

Yes ref #1161 since we expect no timestamp "cold log" mode with crowdsec -dsn.... will not function as expected, however, if you define:

---
filesnames:
  - /var/log/dovecot.log
labels:
  type: dovecot

This will work for log lines read in live mode since live mode uses the current time and not the parsed time.

│ file:/var/log/dovecot.log │ 3.83k │ 2.07k │ 1.76k │ 2 │ 2 │ │ crowdsecurity/dovecot-spam │ CAPI │ ban │ 900 │ │ crowdsecurity/dovecot-logs │ 3.83k │ 2.07k │ 1.76k │ │ crowdsecurity/dovecot-spam │ 1 │ - │ 1 │ 2 │ - │

#Generated acquisition file - wizard.sh (service: apache2) / files : /var/log/apache2/sts_access.log /var/log/apache2/ctrl_access.log /var/log/apache2/ctrl_error.log /var/log/apache2/access.log /var/log/apache2/error.log filenames: - /var/log/apache2/sts_access.log - /var/log/apache2/ctrl_access.log - /var/log/apache2/ctrl_error.log - /var/log/apache2/access.log - /var/log/apache2/error.log labels: type: apache2 --- #Generated acquisition file - wizard.sh (service: sshd) / files : /var/log/auth.log filenames: - /var/log/auth.log labels: type: syslog --- #Generated acquisition file - wizard.sh (service: mysql) / files : /var/log/mysql/error.log filenames: - /var/log/mysql/error.log labels: type: mysql --- #Generated acquisition file - wizard.sh (service: linux) / files : /var/log/syslog /var/log/kern.log filenames: - /var/log/syslog - /var/log/mail.log - /var/log/kern.log labels: type: syslog --- filenames: - /var/log/dovecot.log labels: type: dovecot ---

crowdsecurity / hub

enhancement: dovecot imap login attempts #1160

What would you like to be added?

Why is this needed?