On Mon, Jul 11, 2011 at 6:20 AM, GeorgeY <[email protected]> wrote: > Hi Dan, > > thanks for the reply. > Is it possible for me to alert on all requests which lead to a 404 > page error? > How can I achieve this? > > Thanks, > George >
Base your rule off of:
<rule id="31101" level="5">
<if_sid>31100</if_sid>
<id>^4</id>
<description>Web server 400 error code.</description>
</rule>
