PDA

View Full Version : Feature Request : Seperate ModSec Error log File

vivek
02-21-2008, 10:59 PM
mistwang, Thank you for fixing mod_security problem

I have a request.

I know that when mod_sec encounted,litespeed will save log to error.log file

But I would like to see the [SECURITY] log only.

Any idea to seperate the modsec log ?

Thanks
Vivek
mistwang
02-22-2008, 09:24 AM
We are going to create the audit log as Apache's.
ffeingol
02-22-2008, 08:16 PM
I "think" what Vivek is looking for is for this to work with CSF. Besides putting it in it's own load, it needs to use the exact same format/layout as the mod_security audit log.

Frank
mistwang
02-22-2008, 08:59 PM
We will try.
vivek
02-22-2008, 11:02 PM
I "think" what Vivek is looking for is for this to work with CSF. Besides putting it in it's own load, it needs to use the exact same format/layout as the mod_security audit log.

Frank

Actually I am very much impressed with Apache+ Mod_security+ CSF

But LiteSpeed + Mod_sec + CSF cant work together.

CSF cant read litespeed's log , that is the reason. It will be great if litespeed write logs as apache's format .

Otherwise why dont litespeed write modsecurity error as seperate file and that file should be like apache's log file, so that I can change the location of modsec log file in CSF and thus, lwsw+modsec+csf will work great .
vivek
02-25-2008, 08:00 AM
Any update on this ?
mistwang
02-26-2008, 04:56 PM
The latest 3.3.5 release package comes with this change. It will may CSF happy, but it is not full clone of mod_security audit log though.
vivek
02-26-2008, 05:55 PM
I have 3.3.5 installed. Should I update the installation ?
Do you mean , CSF can detect modsec log from error.log ??

Thanks
mistwang
02-26-2008, 06:03 PM
No, a dedicate mod_security audit log will be created, and the log entry in it should make CSF happy.

Yes, you need to download 3.3.5 again.
vivek
02-26-2008, 06:07 PM
No, a dedicate mod_security audit log will be created, and the log entry in it should make CSF happy.

Yes, you need to download 3.3.5 again.

Thank you
After downloading the package, should I select Upgrade option?
Save current configuration or uninstall all and then reinstall again ?
vivek
02-26-2008, 06:38 PM
Oh! Its great! I reinstalled litespeed and it can now work with CSF!!
This is a great news!

Thank you very much
Vivek
mistwang
02-26-2008, 08:33 PM
Just upgrade.