我在logpath值中使用通配符,如下所示:
[http-get-dos] enabled = true filter = http-get-dos logpath = /var/log/ispconfig/httpd/*/access.log maxretry = 250 findtime = 300 #ban for 10 hours bantime = 36000 action = iptables-multiport[name=HTTP, port="http,https", protocol=tcp]
这很好,但我想排除特定的日志,因为我需要为此创build一个单独的filter。
所以,例如,如果我想排除/var/log/ispconfig/httpd/mysite.com/access.log,我该如何做?