Mod Security WHM Interface not updating

jimlongo

• November 14, 2013 15:08

Hi, the Mod Security interface has not updated sine I started using the paid Atomic Rules. I see activity in /usr/local/apache/logs/modsec_audit.log but nothing in the WHM interface. no corresponding errors in /usr/local/cpanel/logs/error_log

• 

  quietFinn

  • November 14, 2013 20:17

  [quote="jimlongo, post: 1508062">Hi, the Mod Security interface has not updated sine I started using the paid Atomic Rules. I see activity in /usr/local/apache/logs/modsec_audit.log but nothing in the WHM interface. no corresponding errors in /usr/local/cpanel/logs/error_log
  Do you have file: /etc/cron.hourly/modsecparse.pl

  0
• 

  jimlongo

  • November 14, 2013 23:33

  [quote="quietFinn, post: 1508101">Do you have file: /etc/cron.hourly/modsecparse.pl
  Yes I have that file. I am on cpanel 11.40.19

  0
• 

  Sys Admin

  • November 15, 2013 00:56

  Did you try executing it via ssh by running: /etc/cron.hourly/modsecparse.pl ?

  0
• 

  jimlongo

  • November 15, 2013 04:36

  [quote="Sys Admin, post: 1508241">Did you try executing it via ssh by running: /etc/cron.hourly/modsecparse.pl ?
  I've done that, and all that happens is it returns without giving any feedback in the terminal. After doing that i checked the WHM interface and there is no updated activity.

  0
• 

  cPanelMichael

  • November 15, 2013 15:38

  Please open a ticket using the link in my signature so we can take a closer look. You can post the ticket number here so we can update this thread with the outcome. Thank you.

  0
• 

  jimlongo

  • November 15, 2013 16:06

  Support ID 4396573

  0
• 

  cPanelMichael

  • November 20, 2013 18:19

  To update, it looks like this was the result of the installation of CSF/LFD. The resolution to this issue was resolved by following the instructions from: Mod_Sec Log Blank Thank you.

  0
• 

  jimlongo

  • November 21, 2013 17:14

  Yes changing the SecAuditLogType fixes this issue, However according to the Atomic people . . . SecAuditLogType Serial is not as good in terms of performance in comparison to SecAuditLogType Concurrent Anyone can comment on this?

  0

Please sign in to leave a comment.