1
vote
0answers
65 views

How to customize apache mod_sec log output?

I have an apache server which uses mod_security configuration. Those logs are further analyzed and sent out to OSSEC server for intrusion detection and monitoring. That OSSEC server then sends those ...
1
vote
1answer
700 views

How do I make Apache stop logging “ ModSecurity: Access denied”?

I have Apache set up on a Linux server and have mod_security enabled. I have a few lines that look like: SecRule REQUEST_URI "^/*admin" drop,phase:1 Because there is no /admin on my website, and I ...
1
vote
1answer
627 views

Best practices for serving multiple sites with Apache2 [closed]

I have a server with a number of virtual hosts. Over the last couple of years I have continually been improving on most parts of serving these sites, everything from how and where to do logging, how ...
2
votes
1answer
188 views

Is there a way to know if apache receives a request from a public IP not local to your country?

I'm looking for ways to know if an apache server receives a request , from another country (e.g germany) considering its a fair request (no spam , or proxies). I want it either to appear this as a ...
3
votes
1answer
208 views

Reading apache logs is there a way i can know of concurnent users limit?

I want to know on a analysis layer from apache logs which can tell me if the # of concurrent logins (using same username) has exceeded e.g more then 4. Is such a thing can be automated or it requires ...
0
votes
1answer
280 views

Can apache logs tell between encryped and un-encrypted traffic?

Is there a way by just looking at the apache logs you can tell if the user-credentials is encrypted or not? Meaning some kind of encryption e.g ssl or plain-text. Thanks.
0
votes
1answer
274 views

How to know in apache logs if the application has crashed?

I need some help in finding some log pattern in apache logs related to application cash? Is there a specific key word attached related to this event e.g 'crash'. Thanks.
1
vote
1answer
821 views

Apache (XAMPP 1.8.0) access.log/Intrusion Detection Concern

[I originally posted on SO but it earned me a Tumbleweed badge. This looks like a better venue for the question.] I have Apache (XAMPP 1.8.0) running on Vista Pro x64. A couple times now I have seen ...
4
votes
5answers
867 views

Tool for clickstream anlyzing of Apache logs?

Are there any good tools to analyze the clickstream of individual users in Apache web server logs? For example, I'd like to be able to click on a visitors IP address and see all pages the user ...
2
votes
1answer
1k views

http://www.example.com/http://www.example.com/ in Apache log?

I run a website, let's say www.example.com. On it I have a path and file, say www.example.com/path/file.html. The Apache log lists GET requests like: GET /path/file.html HTTP/1.1 Which is correct, ...
2
votes
3answers
5k views

Apache logs: “::1 … ”OPTIONS * HTTP/1.0" 200 -

Just looking at logs of a not-so-busy site on one of our Apache servers and notice tons of these in the log: ::1 - - [15/Apr/2011:12:11:40 -0700] "OPTIONS * HTTP/1.0" 200 - ::1 - - ...
2
votes
1answer
466 views

Apache logging based on user agent

I'd like to update my apache logging so that its destination is based on the user agent string or file type. Specifically, I would like to send my googlebot requests to their own log file, and I ...
8
votes
4answers
202 views

Can missing anchors be logged?

If I have a broken link it gets logged with a 404. If I have a link to an anchor and the anchor is missing, I don't get an entry in the log. How can I find those broken anchor links, especially if the ...