SmartConnector for ModSecurity

Document created by tailianos on Jul 25, 2013
Version 1Show Document
  • View in full screen mode

Hello all,

 

We have created a flexconnector for ModSecurity. You can find it attached!

 

To configure modsecurity's logging follow the next steps:

  • edit modsecurity configuration file and ensure the following options are selected:
    • SecAuditLogParts ABCFHZ

    • SecAuditLogType Serial

    • SecAuditLog /var/log/modsec_audit.log

  • Install a Multiple Folder Follower FlexConnector
  • Move the parser to <SmartConnector_HOME>/current/user/agent/flexagent
  • Configure the smartconnector to read /var/log directory and use this parser

 

Whatever you need please reply to this thread and i will respond back to you.

3 people found this helpful

Outcomes