https://github.com/red5d/modsec-analysis

ModSecurity event log analysis in bash.
https://github.com/red5d/modsec-analysis

Last synced: about 2 months ago
JSON representation

ModSecurity event log analysis in bash.

• Host: GitHub
• URL: https://github.com/red5d/modsec-analysis
• Owner: Red5d
• License: gpl-2.0
• Created: 2013-08-08T01:19:28.000Z (over 11 years ago)
• Default Branch: master
• Last Pushed: 2013-10-01T16:12:04.000Z (over 11 years ago)
• Last Synced: 2023-04-10T13:56:05.874Z (over 1 year ago)
• Language: Shell
• Homepage:
• Size: 133 KB
• Stars: 2
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
modsec-analysis

===============

ModSecurity error log analysis in bash.

I realize there are more sophisticated log analysis applications,

but this is meant to be a simple analysis script for if you don't

have a log analysis application or you just want to do a quick check

on something.

I'm working on getting it to return more detailed results and have

more specific filtering and maybe statistical options.

Create a file called "internalips" in the same directory as the script

to enable filtering logs based on whether the client that generated

the event was inside your network or not.

You may also need to adjust the ERROR_LOG and MODSEC_AUDIT_LOG

variables in the script based on where your system puts those files.