Should I be concerned it doesn't appear any of the Windows firewall logs are being parsed?

hi , i am having an issue after update crowdsec service do not start anymore. " Error 1067 : The process terminated unexpectedly" in logs i have found : `time="20-06-2022 21:23:45" level=info msg="starting CrowdSec service" time="20-06-2022 21:23:45" level=warning msg="can't load CAPI credentials from 'C:\\ProgramData\\CrowdSec\\config\\online_api_credentials.yaml' (missing field)" time="20-06-2022 21:23:45" level=info msg="push and pull to Central API disabled" time="20-06-2022 21:23:46" level=info msg="loading acquisition file : C:\\ProgramData\\CrowdSec\\config\\acquis.yaml" time="20-06-2022 21:23:46" level=warning msg="No matching files for pattern C:\\\\inetpub\\\\logs\\\\LogFiles\\\\*\\\\*.log" type=file time="20-06-2022 21:23:46" level=warning msg="No matching files for pattern C:\\\\Windows\\\\System32\\\\LogFiles\\\\Firewall\\\\pfirewall.log" type=file time="20-06-2022 21:23:46" level=error msg="Failed to notify(sent: false): " time="20-06-2022 21:23:46" level=info msg="Error machine login for : ent: machine not found " time="20-06-2022 21:23:46" level=fatal msg="starting outputs error : authenticate watcher (): Post \"http://127.0.0.1:8080/v1/watchers/login\": API error: ent: machine not found" time="20-06-2022 21:24:06" level=info msg="starting CrowdSec service" ` Does anyone have an idea ?

Greetings, Im having this small issue and Im not sure what cause it : when im trying to list decisions or alerts I get C:\WINDOWS\system32>cscli alerts list time="20-06-2022 04:16:19 PM" level=fatal msg="Unable to list alerts : performing request: Get \"http//127.0.0.1:8080/v1/alerts?limit=50\": could not get jwt token: Post \"http//127.0.0.1:8080/v1/watchers/login\": dial tcp 127.0.0.1:8080: connectex: No connection could be made because the target machine actively refused it." C:\WINDOWS\system32>cscli decisions list time="20-06-2022 04:19:46 PM" level=fatal msg="Unable to list decisions : performing request: Get \"http//127.0.0.1:8080/v1/alerts?has_active_decision=true&include_capi=false&limit=100\": could not get jwt token: Post \"http//127.0.0.1:8080/v1/watchers/login\": dial tcp 127.0.0.1:8080: connectex: No connection could be made because the target machine actively refused it."

Hello, it's possible to link the windows agent to the lapi (installed on another machine linux) using the register command ? I tried "cscli ldap regiter -u URLofTheServer" from the windows but it's always --> "level=fatal msg="api client register: api register (http://XX.XX.XX.XX:8080/) : Post \"http://XX.XX.XX.XX:8080/v1/watchers\": dial tcp XX.XX.XX.XX:8080 connectex: Une tentative de connexion a échoué car le parti connecté n’a pas répondu convenablement au-delà d’une certaine durée ou une connexion établie a échoué car l’hôte de connexion n’a pas répondu"

Crowdsec Not Running Properly, CSCLI Decisions List Returns No Connection Could be Made

hello guys it is safe to test windows crowdsec agent on dev system or its too many bugs in alpha version ?

Hi there, I have old server on 2008 32bit. I have an installation error, is it normal or should the agent install it? I suppose the agent only works on 64 bits but I wanted confirmation

Hello, is there a way to update crowdsec agent and/or bouncer ? After Tuesday patch on a 2019 Windows Server, my bouncer service doesn't start anymore.

Bouncers inactive! The console says, that the bouncers are inactive since 28 days on both windows servers. The console does not report any alerts. a `cscli decisions list` returns banned ip addresses. The entries in the logs are looking okay to me.

Good day all! As new part of the CrowdSec Windows family I'm trying to get this to work on my 'toybox'. Initial installation went as a breeze, though now I'm trying to get the IIS logfiles parsed I get the following error while restarting the service: > time="05-05-2022 13:24:18" level=error msg="crowdsec init: Error while loading acquisition config : while loading acquisition configuration: failed to yaml decode C:\\ProgramData\\CrowdSec\\config\\acquis.yaml: yaml: line 10: could not find expected ':'" My acquis.yaml looks as follows. Am I blind or am I missing something else?