We have created a flexconnector for ModSecurity. You can find it attached!
To configure modsecurity's logging follow the next steps:
- edit modsecurity configuration file and ensure the following options are selected:
- Install a Multiple Folder Follower FlexConnector
- Move the parser to <SmartConnector_HOME>/current/user/agent/flexagent
- Configure the smartconnector to read /var/log directory and use this parser
Whatever you need please reply to this thread and i will respond back to you.