ConfigServer Community Forum

Hello, The current modsec Regex is in this file /usr/local/csf/bin/regex.pm: $line =~ /^\[\S+\s+\S+\s+\S+\s+\S+\s+\S+\] \[:?error\] (\[pid \d+\] )?\[client (\S+)\] ModSecurity:(( \[[^]]+\])*)? Access denied with (code|connection)/) This regexp fails to trigger on logged ModSec events when MPM_EVENT ...