Hi Maykel, > > How about > > > > failregex = ^\S+: Unknown User .* \(<HOST>\)$ > > Thanks for your help but not working... > https://imgur.com/a/w0F2JSC That image shows Unknown User .* \(<HOST>:.*\) but that's not what I suggested, e.g. you have a colon after the <HOST> and as there is no colon in ‘(109.103.148.2)’ then the regexp is not going to match. -- Cheers, Ralph.
