[Definition]
failregex = ^.*"client_ip":"<HOST>".*"status":\s*(403|404|444).*$
ignoreregex =
datepattern = "ts":{EPOCH}