Re: [mod-security-users] modsec console sensors

[Ryan B. <Ryan.Barnett@Breach.com>]

> -----Original Message-----
> From: ku...@it... [mailto:ku...@it...]
> Sent: Wednesday, September 26, 2007 8:23 AM
> To: Ryan Barnett
> Cc: mod...@li...
> Subject: RE: [mod-security-users] modsec console sensors
>=20
> Actually they dont show any data
[Ryan Barnett] Once you properly setup the Console to receive the audit
log data and reconfigure the logging on the Mod Sensors to send their
logs to the Console, the graphs will then be updated as it receives
traffic.

>=20
> Quoting Ryan Barnett <Ryan.Barnett@Breach.com>:
>=20
> >
> > A Sensor is a nothing more than another name for a remote
ModSecurity
> > installation.  If you have Mod embedded into 5 different web
servers,
> > then you have 5 Mod Sensors.  In the open source Console, you then
> > create 5 Sensor profiles, one for each install.  Please refer to my
Blog
> > post on this topic -
> >
http://www.modsecurity.org/blog/archives/2007/03/modsecurity_con_1.html
> >
> > As for the graphs issue - is it that the graphs don't appear at all
or
> > that they don't show any data?  If it is the former, then this is a
> > problem.  If it is the later, it may be because you haven't set up
any
> > Sensors to actually send audit log data to the Console.
> >
> > --
> > Ryan C. Barnett
> > ModSecurity Community Manager
> > Breach Security: Director of Training
> > Web Application Security Consortium (WASC) Member
> > CIS Apache Benchmark Project Lead
> > SANS Instructor, GCIA, GCFA, GCIH, GSNA, GCUX, GSEC
> > Author: Preventing Web Attacks with Apache
> >
> >  > -----Original Message-----
> >> From: mod...@li... [mailto:mod-
> >> sec...@li...] On Behalf Of
> >> ku...@it...
> >> Sent: Wednesday, September 26, 2007 8:02 AM
> >> To: mod...@li...
> >> Subject: [mod-security-users] modsec console sensors
> >>
> >> Hi everybody,
> >>
> >> i have some problems with using modsecurity console, firstly in the
> > main
> >> page
> >> graphs does not appear and secondly this is my biggest problem,
what
> > is
> >> the
> >> main concept of using sensors?
> >>
> >> it would be sensible if you answer me.
> >>
> >>
> >>
> >> ----------------------------------------------------------------
> >> This message was sent using IMP, the Internet Messaging Program.
> >>
> >>
> >
------------------------------------------------------------------------
> > -
> >> This SF.net email is sponsored by: Microsoft
> >> Defy all challenges. Microsoft(R) Visual Studio 2005.
> >> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> >> _______________________________________________
> >> mod-security-users mailing list
> >> mod...@li...
> >> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> >
> >
>=20
>=20
>=20
> ----------------------------------------------------------------
> This message was sent using IMP, the Internet Messaging Program.