Page 1 of 1
plesk LF_MODSEC log
Posted: 22 Apr 2011, 17:59
by cmer
Hello,
It is possible to say LFD has to go and read in several error_log annalyser so that the log of each vhost
Example: /var/www/vhosts/*/statistics/logs/error_log
Thank you:)
Re: plesk LF_MODSEC log
Posted: 24 Apr 2011, 10:05
by chirpy
No, it's not possible. You can only set MODSEC_LOG to a single log file. You could probably add an additional log rule to create such a file if you want lfd to track it.
Re: plesk LF_MODSEC log
Posted: 24 Apr 2011, 20:24
by cmer
Hello,
Thank you for your reply:)
Currently jet managed to change your regex to match a fail2ban and it happened to go read all the log customers with just the variable
example:
Code: Select all
[modsec]
enabled = true
filter = modsec
action = apache
logpath = /var/www/vhosts/*/statistics/logs/error_log
maxretry = 6
restart fail2ban and
Code: Select all
Apr 24 21:04:34 web2 fail2ban.filter : INFO Added logfile = /var/www/vhosts/hebergement-vous./statistics/logs/error_log
Apr 24 21:04:34 web2 fail2ban.filter : INFO Added logfile = /var/www/vhosts/supreme-elite../statistics/logs/error_log
Apr 24 21:04:34 web2 fail2ban.filter : INFO Added logfile = /var/www/vhosts/papys-aperos../statistics/logs/error_log
well it happens to find any matche, Too bad I would have loved to centralize everything on CSF