Add basic traefik parser

parsers/s01-parse/crowdsecurity/traefik-logs.md

@@ -0,0 +1 @@
+This traefik parser supports access logs in the Common Log Format ([defined here for Traefik](https://doc.traefik.io/traefik/observability/access-logs/#format)) and JSON formats.

parsers/s01-parse/crowdsecurity/traefik-logs.yaml

@@ -0,0 +1,19 @@
+debug: true
+filter: "evt.Parsed.program startsWith 'traefik'"
+onsuccess: next_stage
+pattern_syntax:
+  TRAEFIK_ROUTER: '(%{USER}@%{URIHOST}|\-)'
+  TRAEFIK_SERVER_URL: '(%{URI}|\-)'
+  # for json just use TIMESTAMP_ISO8601
+name: crowdsecurity/traefik-logs
+description: "Parse Traefik access logs"
+#
+grok:
+  pattern: '%{NGINXACCESS} %{NUMBER:number_of_requests_received_since_traefik_started} "%{TRAEFIK_ROUTER:traefik_router_name}" "%{TRAEFIK_SERVER_URL:traefik_server_url}" %{NUMBER:request_duration_in_ms}ms'
+  apply_on: message
+# statics:
+#   - meta: log_type
+#     value: http_access-log
+#   - parsed: is_my_service
+#     value: yes
+