Merge pull request #14 from MaastrichtUniversity/DHS-2160

Add AUDIT_TRAIL to LogFormat for upload
MaastrichtUniversity · Jun 22, 2022 · 0768b87 · 0768b87
2 parents 7029338 + 4828b7b
commit 0768b87
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/config/filebeat-upload.yml b/config/filebeat-upload.yml
@@ -7,6 +7,7 @@ filebeat.inputs:
  paths:
  - /var/log/httpd/apache.access.log
  - /var/log/httpd/apache.error.log
+ - /var/log/httpd/apache.audit.log
  tags: ["DAVRODSUPLOAD"]
 
 # Disable filebeat monitoring 

diff --git a/config/upload-davrods-vhost.conf b/config/upload-davrods-vhost.conf
@@ -9,10 +9,11 @@
 <VirtualHost *:80>
  # We override the logfile location here so we can send these logs via Filebeat
  LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
-
+ LogFormat "%{[%Y-%m-%d %T]}t[AUDIT_TRAIL][%u][UPLOAD_DATA] %l %r" audit
  ErrorLogFormat "%{X-Forwarded-For}i [%{u}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% ,\ referer\ %{Referer}i"
  ErrorLog /var/log/httpd/apache.error.log
  CustomLog /var/log/httpd/apache.access.log proxy
+ CustomLog /var/log/httpd/apache.audit.log audit
 
  # Enter your server name here.
  ServerName www.example.com