Jakub Onderka
6408bf9237
Test for JSON audit log
2025-04-22 21:09:42 +02:00
Marios Levogiannis
12add9aef0
Fix meta-actions not being applied if multiMatch is enabled in the chain starter rule
...
Meta-actions can only be used in non-chained rules or in the chain starter
rule of a rule chain. The m_chainedRuleParent member of the RuleWithActions
class is NULL only if the rule is not chained or if it is the chain starter
rule of a rule chain.
Fixes #2867 .
2023-04-27 19:43:01 +03:00
Marios Levogiannis
d3a6b6a6fd
Fix tags not being populated in audit log when multiMatch is enabled
...
Fixes #2754 .
2023-01-20 13:15:28 +02:00
Martin Vierula
3ee6e108d6
Fix multiMatch msg, etc, population in audit log
2022-01-14 09:25:07 -08:00
martinhsv
0470168056
Fix: audit log data omitted when nolog,auditlog
2020-01-07 11:16:07 -03:00
Felipe Zimmerle
f3bbcfc7ef
Removes SecDebugLog directive from the test cases
2016-10-18 18:23:35 -03:00
Felipe Zimmerle
8c714af8e1
Actions refactoring: now there is a clear definiation on the action name
2016-05-17 14:36:59 -03:00
Felipe Zimmerle
3c45a57130
Fix regression tests structure : using method instead of protocol
2015-11-18 11:14:49 -03:00
Felipe Zimmerle
5228b685bf
Fix disruptive actions execution
2015-09-16 19:43:31 -03:00
Felipe Zimmerle
035040cd13
Adds sanity check to confirm that the rule has an ID and it is not duplicated
2015-09-02 18:30:41 -03:00
Felipe Zimmerle
d86427f1dd
Minor fix on the auditlog regression tests
2015-07-14 16:42:03 -03:00
Felipe Zimmerle
f13a1bd880
Adds support the Parallel audit log index creation
...
The index is now being generated.
2015-07-14 00:33:57 -03:00
Felipe Zimmerle
96a777a5cf
Adds initial serial audit logging support
...
Serial logging following the format used on ModSecurity 2.9.
2015-07-14 00:33:50 -03:00
Felipe Zimmerle
5e33a1a3c4
Opens auditlog files and directories with the correct mode
...
Respecting the directives: SecAuditLogStorageDir and SecAuditLogFileMode
2015-07-10 19:08:28 -03:00
Felipe Zimmerle
278b513933
Adds protocol and http version to processUri method's signature
...
Protocol and http version will be further used to fill some variables
and the audit log.
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
2109910848
Adds support to the server ID generation
...
The server ID is a sha-1 identifier generated from the mac address of the first
ethernet device plus the server name. The process is the same used by
ModSecurity 2.9
2015-07-10 18:37:48 -03:00
Felipe Zimmerle
aadbacf854
Adds basic regression test for AuditLog functionalities
2015-07-10 18:37:48 -03:00
