Merge pull request #10 from MaastrichtUniversity/DHS-1842

Dhs 1842
MaastrichtUniversity · May 12, 2022 · 413f2cb · 413f2cb
2 parents 3be7818 + db4a9ab
commit 413f2cb
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/config/davrods-vhost.conf b/config/davrods-vhost.conf
@@ -9,8 +9,10 @@
 <VirtualHost *:80>
  # We override the logfile location here so we can send these logs via Filebeat
  LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
+ LogFormat "%{[%Y-%m-%d %T]}t[AUDIT_TRAIL][%u][DOWNLOAD_DATA] %l %r" audit
  ErrorLog /var/log/httpd/apache.error.log
  CustomLog /var/log/httpd/apache.access.log proxy
+ CustomLog /var/log/httpd/apache.audit.log audit
 
  # Enter your server name here.
  ServerName www.example.com

diff --git a/config/filebeat.yml b/config/filebeat.yml
@@ -7,6 +7,7 @@ filebeat.inputs:
  paths:
  - /var/log/httpd/apache.access.log
  - /var/log/httpd/apache.error.log
+ - /var/log/httpd/apache.audit.log
  tags: ["DAVRODS"]
 
 # Disable filebeat monitoring