https://github.com/one2r/modsecurity-audit-agent

modsecurity 审计代理
https://github.com/one2r/modsecurity-audit-agent

Last synced: 5 days ago
JSON representation

modsecurity 审计代理

• Host: GitHub
• URL: https://github.com/one2r/modsecurity-audit-agent
• Owner: One2r
• License: apache-2.0
• Created: 2023-05-30T06:02:23.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-12-07T06:28:56.000Z (11 months ago)
• Last Synced: 2023-12-07T08:07:30.785Z (11 months ago)
• Language: Go
• Size: 70.3 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# modsecurity-audit-agent   

modsecurity 审计代理

## 功能

- 接收 modsecurity 审计日志，存入 elasticsearch

- IP 黑白名单添加、删除接口

## 依赖

- modsecurity 3.0.x

- redis with RedisBloom

- elasticsearch

## 使用

1. 编译项目  

```

cd /path/to/modsecurity-audit-agent

make

```

2. 修改配置

```

cd /path/to/modsecurity-audit-agent

cp ./config.yaml.example ./configs/config.yaml

vim ./configs/config.yaml

```

3. 启动

```

cd /path/to/modsecurity-audit-agent

./modsecurity-audit-agent

```

4. 配置 modsecurity

```

vim modsecurity.conf

## 修改如下配置

SecAuditLogType HTTPS

SecAuditLog http://127.0.0.1:8080/waf/audit-log

```