Current Path : /usr/share/modsecurity-crs/util/docker/ |
Current File : //usr/share/modsecurity-crs/util/docker/httpd-logging-before-modsec.conf |
ErrorLog ${ERRORLOG} # For more information regarding the values in the extended log format # and aliases and scripts to extract information please read: # https://www.netnea.com/cms/apache-tutorial-5_extending-access-log/ # https://www.netnea.com/cms/apache-tutorial-7_including-modsecurity-core-rules/ LoadModule logio_module /usr/local/apache2/modules/mod_logio.so LogFormat "%h %{GEOIP_COUNTRY_CODE}e %u [%{%Y-%m-%d %H:%M:%S}t.%{usec_frac}t] \"%r\" %>s %b \ \"%{Referer}i\" \"%{User-Agent}i\" \"%{Content-Type}i\" %{remote}p %v %A %p %R \ %{BALANCER_WORKER_ROUTE}e %X \"%{cookie}n\" %{UNIQUE_ID}e %{SSL_PROTOCOL}x %{SSL_CIPHER}x \ %I %O %{ratio}n%% %D %{ModSecTimeIn}e %{ApplicationTime}e %{ModSecTimeOut}e \ %{ModSecAnomalyScoreInPLs}e %{ModSecAnomalyScoreOutPLs}e \ %{ModSecAnomalyScoreIn}e %{ModSecAnomalyScoreOut}e" extended CustomLog ${ACCESSLOG} extended # === ModSec timestamps at the start of each phase (ids: 90000 - 90009) SecAction "id:90000,phase:1,nolog,pass,setvar:TX.ModSecTimestamp1start=%{DURATION}" SecAction "id:90001,phase:2,nolog,pass,setvar:TX.ModSecTimestamp2start=%{DURATION}" SecAction "id:90002,phase:3,nolog,pass,setvar:TX.ModSecTimestamp3start=%{DURATION}" SecAction "id:90003,phase:4,nolog,pass,setvar:TX.ModSecTimestamp4start=%{DURATION}" SecAction "id:90004,phase:5,nolog,pass,setvar:TX.ModSecTimestamp5start=%{DURATION}"