Traefik v3 access logs required for CrowdSec network-level decisions
infoconfigurationUpdated Jan 9, 2026(via Exa)
Technologies:
How to detect:
When CrowdSec agent runs at host level monitoring Traefik-protected services, it requires access to Traefik access logs for decision-making. Traefik must be configured with access logging enabled in JSON format, with log directory mounted so the host-level CrowdSec agent can parse entries.
Recommended action:
Enable Traefik accessLog in static config with JSON format and file path. Mount the log directory as a volume so it's accessible from the host. Configure CrowdSec acquis.yaml to parse the Traefik access log with type: traefik label. Ensure CrowdSec agent has read permissions on the log file.