I have installed fail2ban successfully but it does not keep logs.

[sylarworld]

Hello, forgive my bad English, it is not my first language.
I have installed fail2ban following the Proxmox guide. Everything works correctly and fail2ban blocks my login attempts if I make a mistake more than 5 times. But it doesn't keep any record of that activity for me:


What could I be doing wrong?
This is my configuration:

 

[keeka]

Your output shows your regex test on a logfile and then presumably part of your local jail.local config.
All being well, fail2ban will log everything including Bans/Unbans to /var/log/fail2ban.log. I believe you can/could configure logging to go to systemd journal. Check 'logtarget'.
To see activity since last fail2ban startup, you could try: fail2ban-client status sshd; fail2ban-client status proxmox

 

[sylarworld]

With the command you gave me I was able to see the fail2ban logs and all my failed authentication attempts.

Since I followed the Proxmox manual, I was surprised that it did not show my failed attempts when I tried the command: fail2ban-regex /var/log/daemon.log /etc/fail2ban/filter.d/proxmox.conf

 

[keeka]

Since I followed the Proxmox manual, I was surprised that it did not show my failed attempts when I tried the command: fail2ban-regex /var/log/daemon.log /etc/fail2ban/filter.d/proxmox.conf

That will only show the number of matches. To print the matched lines themselves, add --print-all-matched.
Once set up, you use fail2ban-client (rather than fail2ban-regex) to administer a running fail2ban instance (e.g. manually add/remove blocked IPs).
You can see from your fail2ban-client output, the sshd jail is matching on journald whereas proxmox jail does so on the specified log file (I think).

When you post output from terminal sessions, consider pasting the text rather screen captures. That way, you can sanitize the output and it becomes searchable by forum users

 

[torusJKL]

The wiki seems not to be up to date.
For using fail2ban-regex with systemd as the backend use:

fail2ban-regex systemd-journal /etc/fail2ban/filter.d/proxmox.conf