On Sat, Nov 9, 2013 at 8:19 AM, termvrl term <termvrl@gmail.com> wrote:

My questions:

1) i want to monitor the nic and cpu usage for a period of time. Appreciate if you suggest scripts/tools for that.

While note really ModSecurity related there are lots of monitoring tools out there, e.g. Nagios.
2) i noticed that logging for modsecurity quiet challenging. Anyone can share with me how to send modsecurity log/alert to remote server.

Use mlogc to submit the audit log to a remote server. In your ModSec config file define:

SecAuditLogType Concurrent
SecAuditLog "|/opt/modsecurity/bin/mlogc /opt/modsecurity/etc/mlogc.conf"

Then use the default mlogc-default.conf file that comes with the source to configure the remote server's authentication details.

 - Josh