Hey Avi,
Check out the recent blog post I made on a very similar topic ;)
https://www.trustwave.com/Resources/SpiderLabs-Blog/Sending-ModSecurity-Logs-to-MySQL/?page=1&year=0&month=0

From: 
<owasp-modsecurity-core-rule-set-boun...@lists.owasp.org<mailto:owasp-modsecurity-core-rule-set-boun...@lists.owasp.org>>
 on behalf of Avi Fatal <avi.fa...@gmail.com<mailto:avi.fa...@gmail.com>>
Date: Sunday, March 6, 2016 at 2:48 AM
To: 
"owasp-modsecurity-core-rule-set@lists.owasp.org<mailto:owasp-modsecurity-core-rule-set@lists.owasp.org>"
 
<owasp-modsecurity-core-rule-set@lists.owasp.org<mailto:owasp-modsecurity-core-rule-set@lists.owasp.org>>
Subject: [Owasp-modsecurity-core-rule-set] Parsing the log error

Hi,
I want to trigger a daily email with aggregated data from modsecurity to sites 
owners.
So I want to read the log, put in mysql/mongodb and trigger a job to send the 
report to site owners.

I thought to read the apache log error because it is more structured than audit 
log.
Do you know any good php parser that can read the log and put it in a decent 
array?

Thanks

________________________________

This transmission may contain information that is privileged, confidential, 
and/or exempt from disclosure under applicable law. If you are not the intended 
recipient, you are hereby notified that any disclosure, copying, distribution, 
or use of the information contained herein (including any reliance thereon) is 
strictly prohibited. If you received this transmission in error, please 
immediately contact the sender and destroy the material in its entirety, 
whether in electronic or hard copy format.
_______________________________________________
Owasp-modsecurity-core-rule-set mailing list
Owasp-modsecurity-core-rule-set@lists.owasp.org
https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set

Reply via email to