Dear all,I tried replacing /var/lib/crowdsec/hub/parsers/s01-parse/crowdsecurity/sshd-logs.yaml with the upstream version [1] and it fixed it for me. Maybe crowdsec can be patched to use the upstream version of that file, to be able to ship it with trixie.
Best regards, Martin[1] https://github.com/crowdsecurity/hub/blob/master/parsers/s01-parse/crowdsecurity/sshd-logs.yaml
signature.asc
Description: PGP signature