From 1f8fd57d69a1162a60532ac63f309458f69bec60 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= <raphael@vinot.info>
Date: Mon, 26 Mar 2018 11:41:00 +0200
Subject: [PATCH] chg: Fix&update fail2ban def

---
 objects/fail2ban/definition.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/objects/fail2ban/definition.json b/objects/fail2ban/definition.json
index cfd9757..f28ecb1 100644
--- a/objects/fail2ban/definition.json
+++ b/objects/fail2ban/definition.json
@@ -8,7 +8,7 @@
     "banned-ip": {
       "description": "IP Address banned by fail2ban",
       "ui-priority": 1,
-      "misp-attribute": "ipsrc"
+      "misp-attribute": "ip-src"
     },
     "timestamp": {
       "description": "Timestamp of the report",
@@ -34,6 +34,11 @@
       "description": "Identifier of the victim",
       "ui-priority": 1,
       "misp-attribute": "text"
+    },
+    "logline": {
+      "description": "Example log line that caused the ban.",
+      "ui-priority": 1,
+      "misp-attribute": "text"
     }
   },
   "version": 1,