SmartConnector for ModSecurity

2 Likes
over 8 years ago

Hello all,

We have created a flexconnector for ModSecurity. You can find it attached!

To configure modsecurity's logging follow the next steps:

  • edit modsecurity configuration file and ensure the following options are selected:
    • SecAuditLogParts ABCFHZ

    • SecAuditLogType Serial

    • SecAuditLog /var/log/modsec_audit.log

  • Install a Multiple Folder Follower FlexConnector
  • Move the parser to <SmartConnector_HOME>/current/user/agent/flexagent
  • Configure the smartconnector to read /var/log directory and use this parser

Whatever you need please reply to this thread and i will respond back to you.

Comment List
Anonymous
Related Discussions
Recommended