0

I found somewhere online that you can set up log rotation for audit_log on httpserver so in my modsecurity.conf i switched logging conf from:

SecAuditLog logs/audit_log

to

SecAuditLog "|/usr/IBM/HTTPServer/bin/rotatelogs -l /usr/IBM/HTTPServer/logs/audit_log.%Y-%m-%d-%H_%M_%S 86400"

when this configuration is applied the file is not created and logging is not in a file that i want and it doesnt even log anything.

When i comment the new config and put back the default one with logs/audit_log it logs again to that file. Im trying to find a way to rotate this log since it can go up to 4 GB in a couple of months which is a lot. Has anyone found the way to do this?

Server version is: IBM_HTTP_Server/8.5.5.22 (Unix)

Esa Jokinen
  • 52,963
  • 3
  • 95
  • 151

0 Answers0