You probably have to change the log formatting/output in the ModSec conf files. Do you still have the .conf files from you 2.5.9 installation? If so, look through them and see how you were writing out the logs.
2011/12/6 Carlos André <[email protected]> > Hi ppl! > > I've updated mod_security of my CentOS 5.x from 2.5.9 to 2.5.13 but > now "error_log" doesnt log "Access Denied" message from mod_security > once someone hits one mod_security rule. I changed to 2.6.x and it's > samething... no "Access Denied" messages on "error_log" file. Then, > OSSEC doesnt generate any alert from hits on mod_security rule. > > Anyone here is using OSSEC with mod_security 2.6.x and solved this??? > > Thanks! >
