Re: [mod-security-users] Logging to remote host

[Dave A. <da...@su...>]

Got it going now!

Thanks!

On Fri, 2007-11-02 at 13:05 -0400, Adriel Desautels wrote:
> Thats how you do it ;)
> 
> Regards,
> 	Adriel T. Desautels
> 	Chief Technology Officer
> 	Netragard, LLC.
> 	Office : 617-934-0269
> 	Mobile : 617-633-3821
> 	http://www.linkedin.com/pub/1/118/a45
> 
> ---------------------------------------------------------------
> Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
> Penetration Testing, Vulnerability Assessments, Website Security
> 
> 
> Ryan Barnett wrote:
> > Syslog support isn’t built directly into ModSecurity.  Since the
> > ModSecurity short message data is already sent to the error_log, what
> > you can do is reconfigure Apache to send its error_log data to Syslog. 
> > If you are using Syslog-NG locally, then you could selectively only
> > forward the ModSecurity error log data to the remote host.
> > 
> >  
> > 
> > -- 
> > */Ryan C. Barnett
> > /*ModSecurity Community Manager
> > 
> > Breach Security: Director of Training
> > Web Application Security Consortium (WASC) Member
> > CIS Apache Benchmark Project Lead
> > SANS Instructor, GCIA, GCFA, GCIH, GSNA, GCUX, GSEC
> > 
> > Author: Preventing Web Attacks with Apache
> > 
> >  
> > 
> >  
> > 
> > ------------------------------------------------------------------------
> > 
> > *From:* mod...@li...
> > [mailto:mod...@li...] *On Behalf Of
> > *Dave Augustus
> > *Sent:* Friday, November 02, 2007 12:32 PM
> > *To:* mod...@li...
> > *Subject:* [mod-security-users] Logging to remote host
> > 
> >  
> > 
> > Does modsec support syslog? syslog-ng?
> > 
> > I saw in the docs that it supports external scripts.
> > 
> > Thanks
> > Dave
> > 
> > 
> > ------------------------------------------------------------------------
> > 
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc.
> > Still grepping through log files to find problems?  Stop.
> > Now Search log events and configuration files using AJAX and a browser.
> > Download your FREE copy of Splunk now >> http://get.splunk.com/
> > 
> > 
> > ------------------------------------------------------------------------
> > 
> > _______________________________________________
> > mod-security-users mailing list
> > mod...@li...
> > https://lists.sourceforge.net/lists/listinfo/mod-security-users