crowdsecurity/crowdsec · error

unknown level %s: %w

Error message

unknown level %s: %w

What it means

ConfigureByDSN rejects a file:// DSN whose log_level query parameter is not a valid logrus level. It fires when log.ParseLevel fails on the user-supplied value, aborting acquisition configuration for that DSN.

Source

Thrown at pkg/acquisition/modules/file/config.go:182

		return errors.New("empty file:// DSN")
	}

	if len(args) == 2 && args[1] != "" {
		params, err := url.ParseQuery(args[1])
		if err != nil {
			return fmt.Errorf("could not parse file args: %w", err)
		}

		for key, value := range params {
			switch key {
			case "log_level":
				if len(value) != 1 {
					return errors.New("expected zero or one value for 'log_level'")
				}

				lvl, err := log.ParseLevel(value[0])
				if err != nil {
					return fmt.Errorf("unknown level %s: %w", value[0], err)
				}

				s.logger.Logger.SetLevel(lvl)
			case "max_buffer_size":
				if len(value) != 1 {
					return errors.New("expected zero or one value for 'max_buffer_size'")
				}

				maxBufferSize, err := strconv.Atoi(value[0])
				if err != nil {
					return fmt.Errorf("could not parse max_buffer_size %s: %w", value[0], err)
				}

				s.config.MaxBufferSize = maxBufferSize
			default:
				return fmt.Errorf("unknown parameter %s", key)
			}
		}

View on GitHub (pinned to 909b515798)

Solutions

1. Use a valid level in the DSN: log_level=trace|debug|info|warn|warning|error|fatal|panic
2. Correct the typo in the log_level value in the acquisition yaml DSN

When it happens

Trigger: Thrown at pkg/acquisition/modules/file/config.go:182 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of crowdsecurity/crowdsec@909b515798 (2026-09-06). Data as JSON: /api/errors/0c90da8b098740f3. Report an issue: GitHub.