[Prelude Hybrid IDS] #229: Fix format when checking apache logfile(s)
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#229: Fix format when checking apache logfile(s)
-----------------------+----------------------------------------------------
Reporter: anonymous | Owner: yoann
Type: defect | Status: new
Priority: normal | Milestone: Prelude-LML 0.9.11
Component: generic | Version: 0.9
Severity: minor | Keywords:
-----------------------+----------------------------------------------------
Here is a small fix for prelude-lml.conf when checking Apache logfiles, to
get rid of the annoyed "cannot match" log entries.
{{{
--- prelude-lml.conf.orig Mon May 21 16:11:45 2007
+++ prelude-lml.conf Fri Jun 1 15:30:56 2007
@@ -73,7 +73,7 @@
#
[format=apache]
time-format = "%d/%b/%Y:%H:%M:%S"
-prefix-regex = "^(?P<hostname>\S+) - - \[(?P<timestamp>.{20}) \[+-].{4}\]
"
+prefix-regex = "^(?P<hostname>\S+) - \S+ \[(?P<timestamp>.{20})
[+-].{4}\] "
file = /var/log/apache2/access_log
}}}
Regards,
Robin Gruyters
--
Ticket URL: <https://trac.prelude-ids.org/ticket/229>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel