Re: [mod-security-users] Pb with Mod Security Performance Log (always empty)

[Ivan R. <iva...@gm...>]

On 3/2/07, Alexandre B <let...@gm...> wrote:
> Dear all,
>
> I'm trying to use the performance log feature provided by mod_security, but
> I just can't get how it works (or how it should).

Hi Alexandre,

The feature is actually provided by Apache itself, not ModSecurity. If
it's empty that probably means the directive is placed in a subcontext
that is never processed. For example, a virtual host. Otherwise Apache
would generate one line in the file for every request processed. Try
to move the directive to the main configuration body.


>
> I'm using Apache 2.0.52 with the following modules mod_security2.c,
> mod_unique_id.c, mod_logio.c, proxy_connect.c, proxy_http.c, mod_proxy.c,
> mod_rewrite.c, mod_alias.c, mod_dir.c, mod_negotiation.c, mod_info.c,
> mod_autoindex.c, mod_status.c, mod_mime.c, mod_setenvif.c, mod_mime_magic.c,
> mod_env.c, mod_log_config.c, mod_include.c, mod_auth.c, mod_access.c,
> mod_so.c, http_core.c, prefork.c, core.c
>
> (mod_uniqueid, mod_logio, mod_log_config are required)
>
> Mod Security 2.0.4
>
> I commented out the following lines in the modsecurity_crs_10_config.conf of
> the core rules:
> LogFormat "%V %h %t %{UNIQUE_ID}e \"%r\" %>s %X | %I %O |
> %<{mod_security-time1}n %<{mod_security-time2}n %<{mod_security-time3}n %D"
> mperformance
> CustomLog /var/log/msa/modsec_performance.log mperformance
>
> I've restarted the Apache Server, the file
> /var/log/msa/modsec_performance.log is created, but
> whatever I do on my server (triggering mod security or not) this file is
> still empty.
>
> I also tried with a "simple" log format (LogFormat "%t" mperformance) but
> same result, always empty.
>
> Let me precise you that other log works good.
>
> Did I misconfigure something ?
> What result should be expected when logging performance ?
>
> I've tried to browse the doc
> (http://www.modsecurity.org/documentation/modsecurity-apache/2.1.0/modsecurity2-apache-reference.html
> ) but haven't found anything on this.
>
> Thanks for your really appreciated  help,
>
> Best regards,
>
> Alexandre
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>
>


-- 
Ivan Ristic