[mod-security-users] mlogc not sending to console
Brought to you by:
victorhora,
zimmerletw
|
From: N C <nc...@ya...> - 2009-05-13 08:34:58
|
mlogc does not appear to be sending any entries to my console, although they do appear in /var/log/mlogc/data/. I've tried changing mlogc.conf's ErrorLogLevel from 3 to 5, but only the usual level 3 messages appear in mlogc-error.log. No other log files appear in /var/log/mlogc.
I've tried changing mlogc.conf's ConsoleURI to point to an Apache server, and verified that mlogc is not contacting the URI. I am able to authenticate at the ConsoleURI with the SensorUsername and SensorPassword.
What might I be doing wrong? How can I debug this problem?
Thanks.
modsecurity_crs_10_config.conf:
SecAuditEngine RelevantOnly
SecAuditLogRelevantStatus "^(?:5|4\d[^4])"
SecAuditLogType Concurrent
SecAuditLog "|/opt/mlogc/bin/mlogc /opt/mlogc/etc/mlogc.conf"
SecAuditLogStorageDir /var/log/mlogc/data
mlogc.conf:
CollectorRoot "/var/log/mlogc"
ConsoleURI "https://w.x.y.z:8888/rpc/auditLogReceiver"
SensorUsername "foo"
SensorPassword "bar"
|