- root@Petruk:/var/log# cat modsec_audit.log | grep -o “[id [^]]” | cut -d\” -f2 | sort | uniq -c | sort -n | while read STR; do echo -n “$STR “; ID=$(echo “$STR” | sed -e “s/.\ //”); grep $ID modsec_audit.log | head -1 | grep -o “[msg [^]]*” | cut -d\” -f2; done
- root@Petruk:/var/log# cat /var/log/situs/qe3.co.id_error.log | grep ModSecurity