• Support
  • Forums
  • Blogs

How could i send the Apache Modsecurity log to Alienvault?

eduardo.fernandezeduardo.fernandez

New Life Form
Hi guys,

How could i send the Apache Modsecurity log to Alienvault? 

Regards,

Tagged:

Share post:

Comments

  • I have activated the Spiderlabs Modsecurity plugin for the asset, but I do not know how I have to send the logs to the server to recognize them.
  • When I activate the plugin at the sensor level, and I copy the file on the server and make a cat audit.log> /var/log/modsecurity.log (in sensor) then if I recognize the log and save it in the database. But I want to activate the plugin at the asset level, and I do not know if the logs are passed with rsyslog, ossec, etc ... I have not seen a zzzzz_modsecurity.conf or similar to receive and classify that log in alienvault(server).
Sign In or Register to comment.