metagriffin / modseclogc

A tool to manipulate and analyze ModSecurity audit log files.

GNU General Public License v3.0

6 stars 1 forks source link

undisplay parts with no data #1

Open dthauvin opened 8 years ago

dthauvin commented 8 years ago

hi Metagriffin Thanks for this tool .

Is it possible to add a parameter that hide the "PARTS" when it's empty ? For example the command below display a lot of empty line because i have no "rule" modsec triggrered in my log file .

modseclogc --show-parts K modsec.logsecu

....... --d86e6b12-K--

--95c52a3c-K--

--e7eb404f-K--

--cd51e70c-K--

......

Thanks

metagriffin commented 8 years ago

yes, i think this does make sense, but i'd probably make it an explicit option (since that deviates from standard modsec logging behavior). can you provide a sample input file and expected output file that i can use as a unit test?

dthauvin commented 8 years ago

Hi Here is a file that I cleaned.

Thanks modsec_audit.log.txt