owasp-modsecurity / owasp-modsecurity/ModSecurity
ModSecurity IIS startup message is flooding the event log
@zimmerle is already working on this.
Since Oct 8, 2014.
- Dominant language
- C++
- Stars
- 9.8k
- Forks
- 1.8k
- Avg merge
- 2h 46m
- Merged PRs (30d)
- 1
Description
It seems like ModSecurity for IIS is logging its startup messages way too much, flooding the logs with messages similar to the one bellow:
[...] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[...] ModSecurity: APR compiled version="1.4.8"; loaded version="1.4.8"
[...] ModSecurity: PCRE compiled version="8.31 "; loaded version="8.31 2012-07-06"
[...] ModSecurity: LUA compiled version="Lua 5.1"
[...] ModSecurity: LIBXML compiled version="2.9.1
IIS threads sleeps from time to time, waking up once a request is received. Once started, the thread loads ModSecurity and consequently print these message on the event logs once more, flooding the event logs.
Those events should be treated in a clever way, not changing the default behavior of ModSecurity (which is platform independent) but also not flooding the event log.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.