diff --git a/objects/fail2ban/definition.json b/objects/fail2ban/definition.json index cfd9757..f28ecb1 100644 --- a/objects/fail2ban/definition.json +++ b/objects/fail2ban/definition.json @@ -8,7 +8,7 @@ "banned-ip": { "description": "IP Address banned by fail2ban", "ui-priority": 1, - "misp-attribute": "ipsrc" + "misp-attribute": "ip-src" }, "timestamp": { "description": "Timestamp of the report", @@ -34,6 +34,11 @@ "description": "Identifier of the victim", "ui-priority": 1, "misp-attribute": "text" + }, + "logline": { + "description": "Example log line that caused the ban.", + "ui-priority": 1, + "misp-attribute": "text" } }, "version": 1,