search for: netmask6

Hi Jeff, Thanks for your reply! Regarding grouping by remote address, I understand and for now I'll keep a close eye. Maybe it's an option to group by /24 for ipv4 and /64 for IPv6? We currently do that based on the logs but the OpenMetrics endpoint seem a lot easier. A slight hijack of the original question: but I tried to log only IP addresses (+ result) of failed login attempts but

...ybe it's an option to group by /24 for ipv4 and /64 for IPv6? Hrm, interesting idea. But the answer is: no, there isn't a way. The simplest way to implement something like this would be to add a new aggregating function. So one could do something like: remote_ip:netmask4:24 remote_ip:netmask6:64 To get /24 and /64, respectively. I'll throw this idea on the ever growing pile of things that can be worked on :) Obviously, I can't make any promisses about this ever getting done. > We currently do that based on the logs but the OpenMetrics endpoint seem a > lot easier. Agg...

...n option to group by /24 for ipv4 and /64 for IPv6? Hrm, interesting idea. But the answer is: no, there isn't a way. The simplest way to implement something like this would be to add a new aggregating function. So one could do something like: remote_ip:netmask4:24 remote_ip:netmask6:64 To get /24 and /64, respectively. I'll throw this idea on the ever growing pile of things that can be worked on :) Obviously, I can't make any promisses about this ever getting done. > We currently do that based on the logs but the OpenMetrics endpoint seem a > lot easier. Agg...