{"action":"closed","issue":{"url":"https://api.github.com/repos/fail2ban/fail2ban/issues/795","repository_url":"https://api.github.com/repos/fail2ban/fail2ban","labels_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/795/labels{/name}","comments_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/795/comments","events_url":"https://api.github.com/repos/fail2ban/fail2ban/issues/795/events","html_url":"https://github.com/fail2ban/fail2ban/issues/795","id":41399911,"number":795,"title":"The detection of Time in a log file should not happen all time","user":{"login":"csabattier","id":4409610,"avatar_url":"https://avatars.githubusercontent.com/u/4409610?v=3","gravatar_id":"","url":"https://api.github.com/users/csabattier","html_url":"https://github.com/csabattier","followers_url":"https://api.github.com/users/csabattier/followers","following_url":"https://api.github.com/users/csabattier/following{/other_user}","gists_url":"https://api.github.com/users/csabattier/gists{/gist_id}","starred_url":"https://api.github.com/users/csabattier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/csabattier/subscriptions","organizations_url":"https://api.github.com/users/csabattier/orgs","repos_url":"https://api.github.com/users/csabattier/repos","events_url":"https://api.github.com/users/csabattier/events{/privacy}","received_events_url":"https://api.github.com/users/csabattier/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"sebres","id":3769657,"avatar_url":"https://avatars.githubusercontent.com/u/3769657?v=3","gravatar_id":"","url":"https://api.github.com/users/sebres","html_url":"https://github.com/sebres","followers_url":"https://api.github.com/users/sebres/followers","following_url":"https://api.github.com/users/sebres/following{/other_user}","gists_url":"https://api.github.com/users/sebres/gists{/gist_id}","starred_url":"https://api.github.com/users/sebres/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebres/subscriptions","organizations_url":"https://api.github.com/users/sebres/orgs","repos_url":"https://api.github.com/users/sebres/repos","events_url":"https://api.github.com/users/sebres/events{/privacy}","received_events_url":"https://api.github.com/users/sebres/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/fail2ban/fail2ban/milestones/14","html_url":"https://github.com/fail2ban/fail2ban/milestones/0.10.0","labels_url":"https://api.github.com/repos/fail2ban/fail2ban/milestones/14/labels","id":1759181,"number":14,"title":"0.10.0","description":"Major functionality and performance boosts: semantic times, IPv6 support etc","creator":{"login":"yarikoptic","id":39889,"avatar_url":"https://avatars.githubusercontent.com/u/39889?v=3","gravatar_id":"","url":"https://api.github.com/users/yarikoptic","html_url":"https://github.com/yarikoptic","followers_url":"https://api.github.com/users/yarikoptic/followers","following_url":"https://api.github.com/users/yarikoptic/following{/other_user}","gists_url":"https://api.github.com/users/yarikoptic/gists{/gist_id}","starred_url":"https://api.github.com/users/yarikoptic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yarikoptic/subscriptions","organizations_url":"https://api.github.com/users/yarikoptic/orgs","repos_url":"https://api.github.com/users/yarikoptic/repos","events_url":"https://api.github.com/users/yarikoptic/events{/privacy}","received_events_url":"https://api.github.com/users/yarikoptic/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":4,"state":"open","created_at":"2016-05-11T01:19:51Z","updated_at":"2016-05-13T16:02:26Z","due_on":null,"closed_at":null},"comments":22,"created_at":"2014-08-28T15:01:38Z","updated_at":"2016-05-13T16:02:26Z","closed_at":"2016-05-13T16:02:26Z","body":"Since this new version i'm surprise and happy to see a database support in fail2ban and is a very good news :)\r\nI use fail2ban to check different status of log file with different jail and action for a same log file.\r\nSo for that i saw in the debug mode each time i restart the server he try to calculate for each jail the time template associate to the log file. \r\nI saw in datedetector.py what fail2ban does and i saw he make a loop to analyze each line and try to determine the good time template to use getTime(self, line) function.\r\n\r\nI'm not expert in python and i didn't  analyze the whole of project but i have the feeling that fail2ban don't check if the file have already a time template detected into it database and they are no condition to ignore date detector in case is already in database.\r\nMy guess is : add this condition.\r\nMy second guess is about the number of lines to analyze, by example if i have a file of 100MB, i have the feeling that fail2ban will take every lines of the file when he could take just a sample of this file (like 100 lines) to determine the date template to use.\r\nI dont have the time and the expertise to add this functionnality so if anyone can do it,that could be wonderfull.\r\n\r\n\r\n\r\n "}}