[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mod-security-users
Subject:    [mod-security-users] Surpressing Apache Errors
From:       John Donath <John.Donath () detron ! nl>
Date:       2014-02-25 22:28:07
Message-ID: A9F09C9A5A408F4E99A95510E3AADA23874585A9 () DCA-RES-EX04 ! res ! local
[Download RAW message or body]

Hi,

I'd like to get rid of the majority of Apache errors popping up in de audit=
 log; in fact the only Apache status I'd like to see are the 4xx with the e=
xpection of 404's.

The current default value of SecAuditLogRelevantStatus is "^(?:5|4(?!04))".
Is it OK to change this to: "^(?:4(?!04))" ?

Tnx,
John

[Attachment #3 (text/html)]

<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: \
10pt;">Hi,<br> <br>
I'd like to get rid of the majority of Apache errors popping up in de audit log; in \
fact the only Apache status I'd like to see are the 4xx with the expection of \
404's.<br> <br>
The current default value of SecAuditLogRelevantStatus is \
&quot;^(?:5|4(?!04))&quot;.<br> Is it OK to change this to: &quot;^(?:4(?!04))&quot; \
?<br> <br>
Tnx,<br>
John<br>
</div>
</body>
</html>


[Attachment #4 (--===============6627813761812959226==)]
------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk

_______________________________________________
mod-security-users mailing list
mod-security-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic