How to generate email alert for modsecurity rule set execution
I wish to install ModSecurity for my web application. My application is on NGINX web server which is running in Ubuntu EC2 instance. I wish to know is there any way to generate email alert if some specific rule set of ModSecurity executes?
Thanks
nginx intrusion-detection mod-security2 websecurity
add a comment |
I wish to install ModSecurity for my web application. My application is on NGINX web server which is running in Ubuntu EC2 instance. I wish to know is there any way to generate email alert if some specific rule set of ModSecurity executes?
Thanks
nginx intrusion-detection mod-security2 websecurity
1
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46
add a comment |
I wish to install ModSecurity for my web application. My application is on NGINX web server which is running in Ubuntu EC2 instance. I wish to know is there any way to generate email alert if some specific rule set of ModSecurity executes?
Thanks
nginx intrusion-detection mod-security2 websecurity
I wish to install ModSecurity for my web application. My application is on NGINX web server which is running in Ubuntu EC2 instance. I wish to know is there any way to generate email alert if some specific rule set of ModSecurity executes?
Thanks
nginx intrusion-detection mod-security2 websecurity
nginx intrusion-detection mod-security2 websecurity
asked Nov 28 '18 at 10:45
Mushfiqur RahmanMushfiqur Rahman
8010
8010
1
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46
add a comment |
1
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46
1
1
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53517616%2fhow-to-generate-email-alert-for-modsecurity-rule-set-execution%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53517616%2fhow-to-generate-email-alert-for-modsecurity-rule-set-execution%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Personally I find it easiest to use something like Splunk to monitor the web server log files and fire out email alerts when necessary. Not directly answering your question but gives food for thought...
– Barry Pollard
Nov 28 '18 at 21:24
Thanks for your comment. Yes it's an option though but I was looking for a script or a free open source solution/services or library.
– Mushfiqur Rahman
Nov 29 '18 at 6:46