custom crowdsec parser for os-opnwaf

[gerstepe]

Hi,

i'm using the Web Application Firewall from the Business Edition (os-OPNWAF) and wanted to integrate it into CrowdSec.
I tried to configure the Apache error log in crowdsec aquisitions and added the apache2 and modsecurity collections.
Log parsing does not seem to work.
I was wondering if someone tried this already or made a custom log parser for the OPNWAF logs? I couldn't find anything here or on the web.

[someone]

I am new to WAF

[Monviech (Cedrik)]

Nobody deleted your posts, they were moved to the general section.

You did not answer anything the OP needed.

Its about the log format that crowdsec needs to consume via a collection (https://app.crowdsec.net/hub/author/crowdsecurity/collections/apache2)

The log format of the apache2 access logs need to be original and not preprocessed by syslog-ng, thats why its most likely not working for OP.

Please stop writing this mix of noise that adds nothing of value. If you want to answer a question, do it but without all the confused rambling.

[someone]

Thanks


thanks again

[Patrick M. Hausen]

You have never provided any evidency of these alleged "hacks".