arvindhar / Events not showing in Auditconsole
Brought to you by:
victorhora,
zimmerletw
Menu
▾
▴
Event not showing in Auditconsole.
i'm trying ModSec + Ubuntu 12.04 Desktop + AuditConsole stanalone + derby.
*auditconsole.log*
2014-12-28 12:35:59,381 INFO com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread-#2 com.mchange.v2.c3p0.SQLWarnings.logAndClearWarnings(SQLWarnings.java:43) - Database '/root/tmp/AuditEventDB' $
java.sql.SQLWarning: Database '/root/tmp/AuditEventDB' not created, connection made to existing database instead.
at org.apache.derby.iapi.error.SQLWarningFactory.newSQLWarning(Unknown Source)
at org.apache.derby.impl.jdbc.EmbedConnection.<init>(Unknown Source)
at org.apache.derby.impl.jdbc.EmbedConnection30.<init>(Unknown Source)
at org.apache.derby.impl.jdbc.EmbedConnection40.<init>(Unknown Source)
at org.apache.derby.jdbc.Driver40.getNewEmbedConnection(Unknown Source)
at org.apache.derby.jdbc.InternalDriver.connect(Unknown Source)
at org.apache.derby.jdbc.AutoloadedDriver.connect(Unknown Source)
at com.mchange.v2.c3p0.DriverManagerDataSource.getConnection(DriverManagerDataSource.java:135)
atcom.mchange.v2.c3p0.WrapperConnectionPoolDataSource.getPooledConnection(WrapperConnectionPoolDataSource.java:182)
atcom.mchange.v2.c3p0.WrapperConnectionPoolDataSource.getPooledConnection(WrapperConnectionPoolDataSource.java:171)
atcom.mchange.v2.c3p0.impl.C3P0PooledConnectionPool$1PooledConnectionResourcePoolManager.acquireResource(C3P0PooledConnectionPool.java:137)
at com.mchange.v2.resourcepool.BasicResourcePool.doAcquire(BasicResourcePool.java:1014)
at com.mchange.v2.resourcepool.BasicResourcePool.access$800(BasicResourcePool.java:32)
at com.mchange.v2.resourcepool.BasicResourcePool$AcquireTask.run(BasicResourcePool.java:1810)
atcom.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread.run(ThreadPoolAsynchronousRunner.java:547)
org.jwall.web.audit.console.servlets.AuditLogReceiverServlet.doPut(AuditLogReceiverServlet.java:249) - Sensor 'mfire' is not allowed to send events from address '1.2.1.1'
*mlogc-error.log*
[Sun Dec 28 12:51:22 2014] [2] [31769/b77a0090] Flagging server as errored after failure to submit entry VJ9zc38AAQEAAHw3A3sAAABG with HTTP response code 403: Forbidden
[Sun Dec 28 12:52:27 2014] [2] [31769/b77a0090] Flagging server as errored after failure to submit entry VJ9zc38AAQEAAHw3A3sAAABG with HTTP response code 403: Forbidden
[Sun Dec 28 12:53:32 2014] [2] [31769/b77a0090] Flagging server as errored after failure to submit entry VJ9zc38AAQEAAHw3A3sAAABG with HTTP response code 403: Forbidden
I have updated database with SQL instead of derby. Still i'm in same position and i have attached mlogc and modsecurity conf files for your reference.
my base url is: https://127.0.0.1:8443/
base directory is: /opt/AuditConsole
jdbc:mysql://localhost:3306/AuditConsoleDB?autoReconnect=true
note: changing ip 127.0.1.1 or 127.0.0.1 in mlogc not helps. What port should i use in console uri: 8080 or 8443?
thank you