Hello,
My filter is as follows
$cat /usr/local/etc/fail2ban/filter.d/nextcloud.conf
[Definition]
failregex=^{"reqId":".*","remoteAddr":".*","app":"core","message":"Login failed: '.*' \(Remote IP: '<HOST>'\)","level":2,"time":".*"}$
^{"reqId":".*","level":2,"time":".*","remoteAddr":".*","app":"core".*","message":"Login failed: '.*' \(Remote IP: '<HOST>'\)".*}$
^.*\"remoteAddr\":\"<HOST>\".*Trusted domain error.*$
ignoreregex =Unfortunately, it is not matching the following,
$fail2ban-regex --print-all-missed /tank/owncloudfiles/nextcloud.log /usr/local/etc/fail2ban/filter.d/nextcloud.conf
{"reqId":"06NARx7dQP5QPrse5MtG","level":2,"time":"2018-05-01T21:32:37+00:00","remoteAddr":"212.109.192.85","user":"--","app":"core","method":"GET","url":"\/","message":"Trusted domain error. \"212.109.192.85\" tried to access using \"xx.xxx.xx.xx\" as host.","userAgent":"Mozilla\/5.0 (Windows NT 5.1; rv:9.0.1) Gecko\/20100101 Firefox\/9.0.1","version":"13.0.1.1"}Any idea what could be the issue?