Feature Request : Seperate ModSec Error log File

Discussion in 'Feedback/Feature Requests' started by vivek, Feb 22, 2008.

  1. vivek

    vivek Well-Known Member

    mistwang, Thank you for fixing mod_security problem

    I have a request.

    I know that when mod_sec encounted,litespeed will save log to error.log file

    But I would like to see the [SECURITY] log only.

    Any idea to seperate the modsec log ?

  2. mistwang

    mistwang LiteSpeed Staff

    We are going to create the audit log as Apache's.
  3. ffeingol

    ffeingol Well-Known Member

    I "think" what Vivek is looking for is for this to work with CSF. Besides putting it in it's own load, it needs to use the exact same format/layout as the mod_security audit log.

  4. mistwang

    mistwang LiteSpeed Staff

    We will try.
  5. vivek

    vivek Well-Known Member

    Actually I am very much impressed with Apache+ Mod_security+ CSF

    But LiteSpeed + Mod_sec + CSF cant work together.

    CSF cant read litespeed's log , that is the reason. It will be great if litespeed write logs as apache's format .

    Otherwise why dont litespeed write modsecurity error as seperate file and that file should be like apache's log file, so that I can change the location of modsec log file in CSF and thus, lwsw+modsec+csf will work great .
  6. vivek

    vivek Well-Known Member

    Any update on this ?
  7. mistwang

    mistwang LiteSpeed Staff

    The latest 3.3.5 release package comes with this change. It will may CSF happy, but it is not full clone of mod_security audit log though.
  8. vivek

    vivek Well-Known Member

    I have 3.3.5 installed. Should I update the installation ?
    Do you mean , CSF can detect modsec log from error.log ??

  9. mistwang

    mistwang LiteSpeed Staff

    No, a dedicate mod_security audit log will be created, and the log entry in it should make CSF happy.

    Yes, you need to download 3.3.5 again.
  10. vivek

    vivek Well-Known Member

    Thank you
    After downloading the package, should I select Upgrade option?
    Save current configuration or uninstall all and then reinstall again ?
  11. vivek

    vivek Well-Known Member

    Oh! Its great! I reinstalled litespeed and it can now work with CSF!!
    This is a great news!

    Thank you very much
  12. mistwang

    mistwang LiteSpeed Staff

    Just upgrade.

Share This Page