Skip to content

ModSecurity IIS startup message is flooding the event log #784

Open
@zimmerle

Description

@zimmerle

It seems like ModSecurity for IIS is logging its startup messages way too much, flooding the logs with messages similar to the one bellow:

[...] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[...] ModSecurity: APR compiled version="1.4.8"; loaded version="1.4.8"
[...] ModSecurity: PCRE compiled version="8.31 "; loaded version="8.31 2012-07-06"
[...] ModSecurity: LUA compiled version="Lua 5.1"
[...] ModSecurity: LIBXML compiled version="2.9.1

IIS threads sleeps from time to time, waking up once a request is received. Once started, the thread loads ModSecurity and consequently print these message on the event logs once more, flooding the event logs.

Those events should be treated in a clever way, not changing the default behavior of ModSecurity (which is platform independent) but also not flooding the event log.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions