Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

modsec logs when using ruid2

Discussion in 'Workarounds and Optimization' started by alexh_neq, Dec 5, 2016.

Tags:
  1. alexh_neq

    alexh_neq Member

    Joined:
    Jun 16, 2014
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    Modsecurity is currently writing logs to per user directories under /usr/local/apache/logs/modsec_audit/$USER, i believe because ruid2 is enabled. However these logs are getting massive, and as they are owned by the user they are causing many users accounts to hit their disc quota.

    I cant find any way of adjusting the rotation of these per user logs, all i can find is log rotate configuration for the main modsec_audit.log in /usr/local/cpanel/etc/logrotate.d/modsecurity_logs

    This thread: Add log rotation for mod_security logs says that
    but these logs are definitely not getting rotated!

    Anyone have any idea where the log rotation configuration for the per user modsec logs is stored?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you verify which version of cPanel is installed on this system, and whether the system uses EasyApache 4, or EasyApache 4?

    Thank you.
     
  3. alexh_neq

    alexh_neq Member

    Joined:
    Jun 16, 2014
    Messages:
    12
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    Thanks!

    The cpanel/WHM version is 60.0.26

    ...and it looks like easyapache 3 is active
     
    #3 alexh_neq, Dec 6, 2016
    Last edited by a moderator: Dec 6, 2016
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Could you open a support ticket using the link in my signature so we can determine why the logs aren't rotating? You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
Loading...

Share This Page