Table of Contents
Advertisement
5
CAUTION
Configuring
Apache Using
Syslog
Step 1
Step 2
Step 3
Step 4
A
HTTP S
PACHE
A SIEM Apache HTTP Server DSM accepts Apache events using syslog or
syslog-ng. SIEM records all relevant HTTP status events. The procedure in this
section applies to Apache DSMs operating on UNIX/Linux platforms only.
Select one of the following configuration methods:
•
Configuring Apache Using Syslog
Configuring Apache Using Syslog-ng
•
Do not run both syslog and syslog-ng at the same time.
To configure Apache using the syslog protocol:
Log in to the server hosting Apache, as the root user.
Edit the Apache configuration file httpd.conf.
Add the following information in the Apache configuration file to specify the custom
log format:
LogFormat "%h %A %l %u %t \"%r\" %>s %p %b" <log format name>
Where
<log format name>
format.
Add the following information in the Apache configuration file to specify a custom
path for the syslog events:
CustomLog "|/usr/bin/logger -t httpd -p <facility>.<priority>"
<log format name>
Where:
is a syslog facility, for example, local0.
<facility>
is a syslog priority, for example, info or notice.
<priority>
<log format name>
format. The log format name must match the log format defined in
Configuring DSMs
ERVER
is a variable name you provide to define the log
is a variable name you provide to define the custom log
Step
4.
Advertisement
Table of Contents
