quizknows

Well-Known Member
Oct 20, 2009
1,008
87
78
cPanel Access Level
DataCenter Provider
EA3 provided the mlogc binary for ModSecurity at /usr/local/modsecurity/bin/mlogc. On a fresh EA4 box I'm unable to find mlogc. Are there any plans to include it and/or a status on this? It's extremely helpful for monitoring modsecurity hits in an environment with numerous servers.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hello,

There are currently no open cases for the inclusion of mlogc as part of Mod Security with EasyApache 4, however I encourage you to open a feature request for it's inclusion.

Thank you.
 

garconcn

Well-Known Member
Oct 29, 2009
159
14
68
I can't find /usr/local/modsecurity/bin/mlogc in new EA4 server, was the path changed?

Can anyone share how to centralize the modsecurity log using mlogc? I've experience with centralize syslog but can't figure out mlogc. Thanks
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
Hello,

To update, this was included as part of an EasyApache 4 update on 05-16-2017:

mod_security2
  • 2.9.0-17 - EA-5950: Added mlogc package
It's configuration file is located at /etc/mlogc.conf.

Thank you.
 

garconcn

Well-Known Member
Oct 29, 2009
159
14
68
Thanks for your reply. I checked all my servers with lastest EA4 but can't find /etc/mlogc.conf at all, do I need to create my own?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,228
463
You can install the package with the following command:

Code:
yum install ea-apache24-mod_security2-mlogc
This will populate the /etc/mlogc.conf file.

Thank you.