Only collect first message from audit log
derhansen opened this issue · comments
Sometimes more than one message is logged in the H section of the audit log. The script should only collect the first message with a rule ID
derhansen / logwatch-modsec2
Logwatch script for ModSecurity 2 audit logfile analysis