[Definition]
failregex = ^.*"client_ip":"<HOST>".*"status":\s*401.*$
ignoreregex =
datepattern = "ts":{EPOCH}