Re: [mod-security-users] Log question

[Ivan R. <iv...@we...>]

Tkachenko Alexei wrote:
> Ivan, I can't use such thing.
> I have hundreds of virtual hosts and can't add this "CustomLog ..." to each
> of them.

   So I guess you are not logging to a single file and splitting the
   file into virtual hosts later.


> Additionally I need to preserve current CustomLog setting for each
> VirtualHost.

   I think it is possible to have as many CustomLog entries as
   necessary.


> So I need to add additional logging for all requests by regexp of URL.

   I've already done something like that for the error log in
   Apache 2.x (since it is not possible for Apache 1.x). It's called
   mod_globalerror.c (get it from http://www.apachesecurity.net). With
   this module installed it is possible to have per-virtual host
   ErrorLog directives *and* have the log entries duplicated in the
   global log.

   As for normal requests, I am adding syslog support for exactly
   that in mod_security 1.9. Perhaps I can add the option to write
   log entries to disk too.

-- 
Ivan Ristic (http://www.modsecurity.org)