Table of Contents
Advertisement
Generic Web Server Generic
Where the following values are provided:
•
•
You do not need to edit the username or password in the file.
You need a separate weblogagent.conf file for each access log you want to pull. We recommend
Note
naming them weblogagent1.conf, weblogagent2.conf, and so forth. Put these in the
/opt/webagent directory also.
To run the agent using a configuration file other than weblogagent.conf, use the command:
replacing other_config_file with the name of the web agent configuration file.
Edit the crontab file to push the logs to the MARS at regular intervals. The following example gets new
Step 6
entries from the access log and pushes them to MARS every five minutes:
Web Server Configuration
To configure the Apache web server for the agent
In the file httpd.conf, make sure the LogFormat is either common or combined and matches the
Step 1
format set on the MARS.
Step 2
Stop and restart the Apache server for your changes to take effect.
To configure the iPlanet web server for the agent
In the iPlanet server administration tool, click the Preferences tab.
Step 1
In the left menu, click the Logging Options link.
Step 2
Make sure the Log File matches the log file name set on the MARS.
Step 3
Make sure the Format radio button Use Common Logfile Format is checked.
Step 4
If you have made any changes, click OK.
Step 5
If necessary, shut down and restart the iPlanet web server.
Step 6
User Guide for Cisco Security MARS Local Controller
12-8
password = b
access_log_path identifies the absolute path name to the web server's access log
MARS_ip_address is the IP address of the MARS Appliance
agent.pl other_config_file
crontab -e
5,10,15,20,25,30,35,40,45,50,55,0 * * * *
(cd /opt/webagent;./agent.pl weblogagent1.conf)
5,10,15,20,25,30,35,40,45,50,55,0 * * * *
(cd /opt/webagent;./agent.pl weblogagent2.conf)
Chapter 12
Configuring Web Server Devices
78-17020-01
Advertisement
Table of Contents
Troubleshooting
