github-starred/pangolin
2
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-07-16 06:08:33 -05:00
Code Issues 1.6k Packages Projects Releases 79 Wiki Activity

[GH-ISSUE #2247] Crowdsec fails to parse Traefik Logs - WORKAROUND PROVIDED #38908

New Issue
Closed
opened 2026-06-22 02:29:26 -05:00 by GiteaMirror · 3 comments
GiteaMirror commented 2026-06-22 02:29:26 -05:00
Owner
Copy Link

Originally created by @rayjaymor85 on GitHub (Jan 14, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2247

Describe the Bug

On a fresh install there are two lines missing in the default config/traefik/traefik_config.yml file that will prevent the crowdsec integration from parsing traefik logs properly.

I admit I'm not familiar enough with the codebase to find the template in guithub, but I was able to fix my crowdsec implementation (setup by the self-installer tool) by adding these two lines to accessLog.fields.names on the above mentioned file:

RouterName: keep
time: keep

So essentially the top of my traefik_config.yml file now looks like this:

accessLog:
 fields:
    defaultMode: drop
    names:
      RouterName: keep
      time: keep
      ClientAddr: keep
      ClientHost: keep
      DownstreamContentSize: keep
      DownstreamStatus: keep

after the above changes, crowdsec is now parsing my traefik logs just fine

Environment

  • OS Type & Version: Ubuntu 24.04
  • Pangolin Version: 1.41.1
  • Traefik Version: 3.6
  • Crowdsec 1.7.4

To Reproduce

Simply perform a fresh guided installer using the automated installer including the steps to install crowdsec.
Out of the box, traefik logs don't seem to be parsing when checking against `docker exec crowdsec cscli metrics'

Performing the above mentioned changes to config/traefik/traefik_config.yml then restarting the docker stack resolves the issue.

Expected Behavior

docker exec crowdsec cscli metrics should show traefik logs being parsed, with only a small percentage remaining unparsed.

Originally created by @rayjaymor85 on GitHub (Jan 14, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/2247 ### Describe the Bug On a fresh install there are two lines missing in the default `config/traefik/traefik_config.yml` file that will prevent the crowdsec integration from parsing traefik logs properly. I admit I'm not familiar enough with the codebase to find the template in guithub, but I was able to fix my crowdsec implementation (setup by the self-installer tool) by adding these two lines to `accessLog.fields.names` on the above mentioned file: ``` RouterName: keep time: keep ``` So essentially the top of my `traefik_config.yml` file now looks like this: ``` accessLog: fields: defaultMode: drop names: RouterName: keep time: keep ClientAddr: keep ClientHost: keep DownstreamContentSize: keep DownstreamStatus: keep ``` after the above changes, crowdsec is now parsing my traefik logs just fine ### Environment - OS Type & Version: Ubuntu 24.04 - Pangolin Version: 1.41.1 - Traefik Version: 3.6 - Crowdsec 1.7.4 ### To Reproduce Simply perform a fresh guided installer using the automated installer including the steps to install crowdsec. Out of the box, traefik logs don't seem to be parsing when checking against `docker exec crowdsec cscli metrics' Performing the above mentioned changes to `config/traefik/traefik_config.yml` then restarting the docker stack resolves the issue. ### Expected Behavior `docker exec crowdsec cscli metrics` should show traefik logs being parsed, with only a small percentage remaining unparsed.
GiteaMirror added the stale label 2026-06-22 02:29:26 -05:00
GiteaMirror commented 2026-06-22 02:29:29 -05:00
Author
Owner
Copy Link

@AblabiX commented on GitHub (Jan 15, 2026):

already fixed

https://github.com/crowdsecurity/hub/pull/1644

<!-- gh-comment-id:3756291904 --> @AblabiX commented on GitHub (Jan 15, 2026): already fixed https://github.com/crowdsecurity/hub/pull/1644
GiteaMirror commented 2026-06-22 02:29:30 -05:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Jan 30, 2026):

This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.

<!-- gh-comment-id:3821127387 --> @github-actions[bot] commented on GitHub (Jan 30, 2026): This issue has been automatically marked as stale due to 14 days of inactivity. It will be closed in 14 days if no further activity occurs.
GiteaMirror commented 2026-06-22 02:29:31 -05:00
Author
Owner
Copy Link

@github-actions[bot] commented on GitHub (Feb 13, 2026):

This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.

<!-- gh-comment-id:3894168181 --> @github-actions[bot] commented on GitHub (Feb 13, 2026): This issue has been automatically closed due to inactivity. If you believe this is still relevant, please open a new issue with up-to-date information.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
authentication
bug
config
dependencies
docker
documentation
enhancement
good first issue
help wanted
Improvement
Look Into
needs investigating
networking
new feature
non-critical bug
potential bug
pull-request
Mirrored from GitHub Pull Request
 question
reverse proxy
Security
stale
ui
wontfix
No Label stale
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#38908
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?