modsec_grafana.jpg modsec_grafana1.jpg
Dashboard to work with ModSecurity and the OWASP Coreruleset. Especially in a early phase of deploying it to handle and adjust false positives quickly. Depending on the applications behind the waf it is very practical also for maintenance...
Dependencies
- loki
- nginx error logs (default)
- modsecurity
- OWASP Coreruleset
How to get the data
I sent the default error logs of NGINX (where modsecurity also writes the information, this dashboard needs) with promtail to a loki instance.
If you need more information. I summarized my setup here.
