Add AUDIT_TRAIL LogFormat for upload [DHS-2160, DHS-2352

MaastrichtUniversity · Jun 10, 2022 · 50bfc2a · 50bfc2a
1 parent 413f2cb
commit 50bfc2a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/config/filebeat-upload.yml b/config/filebeat-upload.yml
@@ -7,6 +7,7 @@ filebeat.inputs:
  paths:
  - /var/log/httpd/apache.access.log
  - /var/log/httpd/apache.error.log
+ - /var/log/httpd/apache.audit.log
  tags: ["DAVRODSUPLOAD"]
 
 # Disable filebeat monitoring 

diff --git a/config/upload-davrods-vhost.conf b/config/upload-davrods-vhost.conf
@@ -9,8 +9,10 @@
 <VirtualHost *:80>
  # We override the logfile location here so we can send these logs via Filebeat
  LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
+ LogFormat "%{[%Y-%m-%d %T]}t[AUDIT_TRAIL][%u][UPLOAD_DATA] %l %r" audit
  ErrorLog /var/log/httpd/apache.error.log
  CustomLog /var/log/httpd/apache.access.log proxy
+ CustomLog /var/log/httpd/apache.audit.log audit
 
  # Enter your server name here.
  ServerName www.example.com