fail2ban nextcloud

-----nextcloud.conf in filter.d------

[Definition]
failregex = ^{"reqId":"\w{20}","level":\d,"time":"\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\+00:00","remoteAddr":".+\","message":"Login failed:
ignoreregex =

------nextcloud.conf in jail.d---------

[nextcloud]
enabled = true
chain = DOCKER-USER
port = http,https
filter = nextcloud
logpath = /var/log/nextcloud/access.log

----Error log sample output--------

{"reqId":"icEl09JwlHfYBLA69Wq4","level":2,"time":"2020-07-31T13:08:23+00:00","remoteAddr":"192.168.1.1","user":"--","app":"no app in context","method":"POST","url":"/login","message":"Login failed: sdf (Remote IP: 192.168.1.1)","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36","version":"19.0.1.1"}

-----Error when starting fail2ban-----------

fail2ban    | 2020-08-02 18:35:53,019 fail2ban.filter         [1]: ERROR   No failure-id group in '^{"reqId":"\w{20}","level":\d,"time":"..<a lot more here>...

fail2ban    | 2020-08-02 18:35:53,020 fail2ban                [1]: ERROR   NOK: ('No failure-id group in \'^{"reqId":"\\w{20}","level":\\d,"time":"\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\+00:00","remoteAddr":".+\\","message":"Login failed:\'',)