Re: [mod-security-users] A way to turn off local Concurrent Audit Log logging?
Brought to you by:
victorhora,
zimmerletw
Menu
▾
▴
Re: [mod-security-users] A way to turn off local Concurrent Audit Log logging?
|
From: Ryan B. <RBa...@tr...> - 2014-06-06 01:12:32
|
Update the KeepFiles directive here - https://github.com/SpiderLabs/ModSecurity/blob/master/mlogc/mlogc-default.conf#L39-42 Ryan Barnett Lead Security Researcher, SpiderLabs Trustwave | SMART SECURITY ON DEMAND www.trustwave.com<http://www.trustwave.com/> On Jun 5, 2014, at 9:10 PM, "Christopher Jay Manders" <cma...@ap...<mailto:cma...@ap...>> wrote: Greetings, Is there a method to disable the local logging via the concurrent audit log? They are being shipped off the box via mlogc, so they are redundant locally to the system….and fill up the disk quickly. A single directive to do this is what I would expect, but I don’t see anything for that. Thoughts? Thanks! Christopher ------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. Written by three acclaimed leaders in the field, this first edition is now available. Download your free book today! http://p.sf.net/sfu/NeoTech _______________________________________________ mod-security-users mailing list mod...@li...<mailto:mod...@li...> https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/ ________________________________ This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. |