Thread: [mod-security-users] Haven't had an entry in debug.log since yesterday
Brought to you by:
victorhora,
zimmerletw
From: Charles H. <ch...@ch...> - 2009-04-28 13:13:41
|
Hi, I'm confused. The last entry in my debug.log was yesterday at 09:09:13 I do have entries for today in the audit.log and in httpd-access.log. Does that mean that there isn't anything going on to debug? Would it help if I posted my custom rules? -- Thanks, Charles http://bubbabbq.homeunix.net UberNooB, mod_security v.2.5.9, DetectionOnly mode, Personal web site, Apache 2.2.11, FreeBSD-6.4-STABLE |
From: Ryan B. <Rya...@br...> - 2009-04-28 13:52:53
|
-----Original Message----- From: Charles Howse [mailto:ch...@ch...] Sent: Tuesday, April 28, 2009 9:13 AM To: mod-security-users Subject: [mod-security-users] Haven't had an entry in debug.log since yesterday Hi, I'm confused. The last entry in my debug.log was yesterday at 09:09:13 I do have entries for today in the audit.log and in httpd-access.log. Does that mean that there isn't anything going on to debug? Would it help if I posted my custom rules? [Ryan Barnett] What do you have the SecDebugLogLevel set to? |
From: Charles H. <ch...@ch...> - 2009-04-28 14:04:12
|
On Apr 28, 2009, at 8:40 AM, Ryan Barnett wrote: > -----Original Message----- > From: Charles Howse [mailto:ch...@ch...] > Sent: Tuesday, April 28, 2009 9:13 AM > To: mod-security-users > Subject: [mod-security-users] Haven't had an entry in debug.log > since yesterday > > Hi, > I'm confused. > The last entry in my debug.log was yesterday at 09:09:13 > I do have entries for today in the audit.log and in httpd-access.log. > > Does that mean that there isn't anything going on to debug? > > Would it help if I posted my custom rules? > > [Ryan Barnett] What do you have the SecDebugLogLevel set to? > I have it set to 0, assuming, as the documentation states, that level 1, 2, and 3 debug information is always logged, and SecDebugLogLevel can be set to 0 in production...? |
From: Ryan B. <Rya...@br...> - 2009-04-28 14:00:17
|
-----Original Message----- From: Charles Howse [mailto:ch...@ch...] Sent: Tuesday, April 28, 2009 9:44 AM To: Ryan Barnett Cc: mod-security-users Subject: Re: [mod-security-users] Haven't had an entry in debug.log since yesterday On Apr 28, 2009, at 8:40 AM, Ryan Barnett wrote: > -----Original Message----- > From: Charles Howse [mailto:ch...@ch...] > Sent: Tuesday, April 28, 2009 9:13 AM > To: mod-security-users > Subject: [mod-security-users] Haven't had an entry in debug.log > since yesterday > > Hi, > I'm confused. > The last entry in my debug.log was yesterday at 09:09:13 > I do have entries for today in the audit.log and in httpd-access.log. > > Does that mean that there isn't anything going on to debug? > > Would it help if I posted my custom rules? > > [Ryan Barnett] What do you have the SecDebugLogLevel set to? > I have it set to 0, assuming, as the documentation states, that level 1, 2, and 3 debug information is always logged, and SecDebugLogLevel can be set to 0 in production...? [Ryan Barnett] If you set the SecDebugLogLevel to 0, then nothing will be logged to the debug log. What the documentation means is that the data that is logged to the Apache error_log file is identical to that of the 1-3 SecDebugLogLevel settings so setting this in the debug log would be redundant. |
From: Charles H. <ch...@ch...> - 2009-04-28 13:59:21
|
On Apr 28, 2009, at 8:52 AM, Ryan Barnett wrote: > > > -----Original Message----- > From: Charles Howse [mailto:ch...@ch...] > Sent: Tuesday, April 28, 2009 9:44 AM > To: Ryan Barnett > Cc: mod-security-users > Subject: Re: [mod-security-users] Haven't had an entry in debug.log > since yesterday > > > On Apr 28, 2009, at 8:40 AM, Ryan Barnett wrote: > >> -----Original Message----- >> From: Charles Howse [mailto:ch...@ch...] >> Sent: Tuesday, April 28, 2009 9:13 AM >> To: mod-security-users >> Subject: [mod-security-users] Haven't had an entry in debug.log >> since yesterday >> >> Hi, >> I'm confused. >> The last entry in my debug.log was yesterday at 09:09:13 >> I do have entries for today in the audit.log and in httpd-access.log. >> >> Does that mean that there isn't anything going on to debug? >> >> Would it help if I posted my custom rules? >> >> [Ryan Barnett] What do you have the SecDebugLogLevel set to? >> > I have it set to 0, assuming, as the documentation states, that level > 1, 2, and 3 debug information is always logged, and SecDebugLogLevel > can be set to 0 in production...? > [Ryan Barnett] If you set the SecDebugLogLevel to 0, then nothing > will be logged to the debug log. What the documentation means is > that the data that is logged to the Apache error_log file is > identical to that of the 1-3 SecDebugLogLevel settings so setting > this in the debug log would be redundant. OIC, I'll set it back to 3. Thanks! > |