I'd like to use Fail2Ban to monitor authentication failures in osTicket.Does osTicket log authentication failures anywhere? I need a file that I can monitor with Fail2Ban. osTicket could log via Apache, Syslog, directly to a file, or I could even monitor a database.Anyone have any tips or suggestions? Thanks!
The system log of osticket stores it entries in the table ost_syslog.There you can find authentication failures:
That would work - I'll need to export it from MySQL to Fail2Ban somehow, but it'll do! Any chance you know of a way to get osTicket to log directly to a text file?
I'm not aware that there is a way to log directly to a text file.
