Is this actually expected to work as described?

[shoce]

I am trying it and there are no expected metrics in the GET /metrics response, only those metrics with prefixes go_, process_ and promhttp_metric_handler_.

[shoce]

ok i guess i need to update the auth.log regexp, my logs look like this:

2024-09-05T19:08:01.039539+00:00 server sshd[1268292]: Invalid user neil from 192.253.225.187 port 39576