Re: capturing user logins
Chaim Sanders <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <CAE8hE=r711qdFHepx8ZdHD1OpFizHSfbw5WmN_3yxJhV3dN4gQ@mail.gmail.com> |
Yes, You can make a rule that checks if the parameter with the username is provided and log that. You can then parse the log or use MLogc to move things to third party servers like elasticsearch. Let me know if that makes sense or you need more help. Thanks, - Chaim On Mon, Mar 25, 2019 at 3:01 PM Doug Erwin <[email protected]> wrote: > Hi all, I am new to modsecurity but I would like to use it to capture user > logins so that I could build a history of user access over time. Is there > a way to do that? I am pretty sure that this would be a new special or > custom rule. Any thoughts on this? > > > > Thanks in advance. > > > > Doug > > > > Doug Erwin > > President > > TTP Solutions / TheTradingPortal.com > > [email protected] > > Office: 615-469-0409 > > Cell: 615-498-4756 > > [image: Email_Signature_Logo] > > > _______________________________________________ > mod-security-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/mod-security-users > Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: > http://www.modsecurity.org/projects/commercial/rules/ > http://www.modsecurity.org/projects/commercial/support/ > -- -- Chaim Sanders http://www.ChaimSanders.com _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/
image001.png
(image/png, 16.4 KB) - not displayed