https://github.com/red5d/modsec-analysis
ModSecurity event log analysis in bash.
https://github.com/red5d/modsec-analysis
Last synced: 4 months ago
JSON representation
ModSecurity event log analysis in bash.
- Host: GitHub
- URL: https://github.com/red5d/modsec-analysis
- Owner: Red5d
- License: gpl-2.0
- Created: 2013-08-08T01:19:28.000Z (almost 12 years ago)
- Default Branch: master
- Last Pushed: 2013-10-01T16:12:04.000Z (almost 12 years ago)
- Last Synced: 2025-01-13T05:41:52.690Z (6 months ago)
- Language: Shell
- Homepage:
- Size: 133 KB
- Stars: 2
- Watchers: 3
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
modsec-analysis
===============
ModSecurity error log analysis in bash.
I realize there are more sophisticated log analysis applications,
but this is meant to be a simple analysis script for if you don't
have a log analysis application or you just want to do a quick check
on something.
I'm working on getting it to return more detailed results and have
more specific filtering and maybe statistical options.
Create a file called "internalips" in the same directory as the script
to enable filtering logs based on whether the client that generated
the event was inside your network or not.
You may also need to adjust the ERROR_LOG and MODSEC_AUDIT_LOG
variables in the script based on where your system puts those files.