Thread: [mod-security-users] SecAuditLog question
Brought to you by:
victorhora,
zimmerletw
|
From: <az...@po...> - 2020-01-10 05:27:31
|
Hi, when using 'Concurrent' logging format, is it possible to disable concurrent logging index file set by 'SecAuditLog'? I don't need it. Thanks. azur |
|
From: Christian F. <chr...@ne...> - 2020-01-10 05:33:04
|
I do not think it is, Azur. But I see your pain... On Fri, Jan 10, 2020 at 06:27:17AM +0100, az...@po... wrote: > Hi, > > when using 'Concurrent' logging format, is it possible to disable concurrent > logging index file set by 'SecAuditLog'? I don't need it. Thanks. > > azur > > > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ |
|
From: <az...@po...> - 2020-01-10 05:35:41
|
Ok, will it do any harm if i set it to /dev/null? Citát Christian Folini <chr...@ne...>: > I do not think it is, Azur. But I see your pain... > > On Fri, Jan 10, 2020 at 06:27:17AM +0100, az...@po... wrote: >> Hi, >> >> when using 'Concurrent' logging format, is it possible to disable concurrent >> logging index file set by 'SecAuditLog'? I don't need it. Thanks. >> >> azur >> >> >> >> >> _______________________________________________ >> mod-security-users mailing list >> mod...@li... >> https://lists.sourceforge.net/lists/listinfo/mod-security-users >> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: >> http://www.modsecurity.org/projects/commercial/rules/ >> http://www.modsecurity.org/projects/commercial/support/ > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ |
|
From: Christian F. <chr...@ne...> - 2020-01-10 07:28:22
|
I do not know. Give it a shot, and please don't forget to report back (if you survive. :) On Fri, Jan 10, 2020 at 06:35:31AM +0100, az...@po... wrote: > Ok, will it do any harm if i set it to /dev/null? > > > > > > Citát Christian Folini <chr...@ne...>: > > > I do not think it is, Azur. But I see your pain... > > > > On Fri, Jan 10, 2020 at 06:27:17AM +0100, az...@po... wrote: > > > Hi, > > > > > > when using 'Concurrent' logging format, is it possible to disable concurrent > > > logging index file set by 'SecAuditLog'? I don't need it. Thanks. > > > > > > azur > > > > > > > > > > > > > > > _______________________________________________ > > > mod-security-users mailing list > > > mod...@li... > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > > http://www.modsecurity.org/projects/commercial/rules/ > > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > _______________________________________________ > > mod-security-users mailing list > > mod...@li... > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > http://www.modsecurity.org/projects/commercial/rules/ > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ |
|
From: <az...@po...> - 2020-01-14 14:15:31
|
Looks it's working fine with /dev/null (tested on about 10 servers for several days). BTW, are we the only one here? :) Citát Christian Folini <chr...@ne...>: > I do not know. Give it a shot, and please don't forget to report back (if you > survive. :) > > On Fri, Jan 10, 2020 at 06:35:31AM +0100, az...@po... wrote: >> Ok, will it do any harm if i set it to /dev/null? >> >> >> >> >> >> Citát Christian Folini <chr...@ne...>: >> >> > I do not think it is, Azur. But I see your pain... >> > >> > On Fri, Jan 10, 2020 at 06:27:17AM +0100, az...@po... wrote: >> > > Hi, >> > > >> > > when using 'Concurrent' logging format, is it possible to >> disable concurrent >> > > logging index file set by 'SecAuditLog'? I don't need it. Thanks. >> > > >> > > azur >> > > >> > > >> > > >> > > >> > > _______________________________________________ >> > > mod-security-users mailing list >> > > mod...@li... >> > > https://lists.sourceforge.net/lists/listinfo/mod-security-users >> > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: >> > > http://www.modsecurity.org/projects/commercial/rules/ >> > > http://www.modsecurity.org/projects/commercial/support/ >> > >> > >> > _______________________________________________ >> > mod-security-users mailing list >> > mod...@li... >> > https://lists.sourceforge.net/lists/listinfo/mod-security-users >> > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: >> > http://www.modsecurity.org/projects/commercial/rules/ >> > http://www.modsecurity.org/projects/commercial/support/ >> >> >> >> >> >> _______________________________________________ >> mod-security-users mailing list >> mod...@li... >> https://lists.sourceforge.net/lists/listinfo/mod-security-users >> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: >> http://www.modsecurity.org/projects/commercial/rules/ >> http://www.modsecurity.org/projects/commercial/support/ > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ |
|
From: Christian F. <chr...@ne...> - 2020-01-14 14:27:28
|
Thank you for the good news. I'm taking note. On Tue, Jan 14, 2020 at 03:15:16PM +0100, az...@po... wrote: > BTW, are we the only one here? :) Nah, everybody is busy patching their servers with 3.0.4. :) Cheers, Christian > > > > > Citát Christian Folini <chr...@ne...>: > > > I do not know. Give it a shot, and please don't forget to report back (if you > > survive. :) > > > > On Fri, Jan 10, 2020 at 06:35:31AM +0100, az...@po... wrote: > > > Ok, will it do any harm if i set it to /dev/null? > > > > > > > > > > > > > > > > > > Citát Christian Folini <chr...@ne...>: > > > > > > > I do not think it is, Azur. But I see your pain... > > > > > > > > On Fri, Jan 10, 2020 at 06:27:17AM +0100, az...@po... wrote: > > > > > Hi, > > > > > > > > > > when using 'Concurrent' logging format, is it possible to > > > disable concurrent > > > > > logging index file set by 'SecAuditLog'? I don't need it. Thanks. > > > > > > > > > > azur > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > mod-security-users mailing list > > > > > mod...@li... > > > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > > > > http://www.modsecurity.org/projects/commercial/rules/ > > > > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > > > > > > > _______________________________________________ > > > > mod-security-users mailing list > > > > mod...@li... > > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > > > http://www.modsecurity.org/projects/commercial/rules/ > > > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > > > > > > > > > > > > > _______________________________________________ > > > mod-security-users mailing list > > > mod...@li... > > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > > http://www.modsecurity.org/projects/commercial/rules/ > > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > _______________________________________________ > > mod-security-users mailing list > > mod...@li... > > https://lists.sourceforge.net/lists/listinfo/mod-security-users > > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > > http://www.modsecurity.org/projects/commercial/rules/ > > http://www.modsecurity.org/projects/commercial/support/ > > > > > > _______________________________________________ > mod-security-users mailing list > mod...@li... > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ |