mlogc on EA4?

quizknows

• January 11, 2017 17:20

EA3 provided the mlogc binary for ModSecurity at /usr/local/modsecurity/bin/mlogc. On a fresh EA4 box I'm unable to find mlogc. Are there any plans to include it and/or a status on this? It's extremely helpful for monitoring modsecurity hits in an environment with numerous servers.

• 

  cPanelMichael

  • January 12, 2017 17:45

  Hello, There are currently no open cases for the inclusion of mlogc as part of Mod Security with EasyApache 4, however I encourage you to open a feature request for it's inclusion. Thank you.

  0
• 

  quizknows

  • January 12, 2017 20:23

  Sounds good, thanks.

  0
• 

  garconcn

  • May 24, 2017 23:46

  I can't find /usr/local/modsecurity/bin/mlogc in new EA4 server, was the path changed? Can anyone share how to centralize the modsecurity log using mlogc? I've experience with centralize syslog but can't figure out mlogc. Thanks

  0
• 

  cPanelMichael

  • June 01, 2017 15:58

  Hello, To update, this was included as part of an EasyApache 4 update on 05-16-2017: mod_security2 [LIST]

  2.9.0-17 - EA-5950: Added mlogc package
  It's configuration file is located at /etc/mlogc.conf. Thank you.

  0
• 

  garconcn

  • June 01, 2017 17:08

  Thanks for your reply. I checked all my servers with lastest EA4 but can't find /etc/mlogc.conf at all, do I need to create my own?

  0
• 

  cPanelMichael

  • June 01, 2017 17:49

  You can install the package with the following command:
  yum install ea-apache24-mod_security2-mlogc
  This will populate the /etc/mlogc.conf file. Thank you.

  0
• 

  garconcn

  • June 01, 2017 18:02

  You can install the package with the following command:
  yum install ea-apache24-mod_security2-mlogc
  This will populate the /etc/mlogc.conf file. Thank you.

  
  Thank you, I will give it a try.

  0

Please sign in to leave a comment.