Difference between revisions of "HIDS 60816"
(Created page with "{{Infobox |header1= Rule 60816 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Internal Server Error. The server encountered an unexpected condition which ...") |
m |
||
| Line 11: | Line 11: | ||
This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache. | This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache. | ||
| − | '''These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause the | + | '''These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause either the alert or the internal error in apache. ASL is just reporting that apache is reporting a 500 error has occured.''' |
== Details == | == Details == | ||
Latest revision as of 17:15, 15 February 2016
| Rule 60816 | |
|---|---|
| Status | Active |
| Alert Message | Internal Server Error. The server encountered an unexpected condition which prevented it from fulfilling the request. |
Contents |
[edit] Description
This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache.
These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause either the alert or the internal error in apache. ASL is just reporting that apache is reporting a 500 error has occured.
[edit] Details
This rule is designed to detect when apache has generate an Internal server error, a 500 error.
ASL will not shun, by default, on these events however if you wish to have ASL block on these events please see the Tuning Advice section below.
Disabling this rule will not prevent apache from generating these 500 errors. It will simply "silence" the alert in ASL, however the 500 errors will continue in Apache.. We do not recommend you disable this rule.
[edit] Troubleshooting
[edit] False Positives
None. This rule is not caused by ASL. ASL merely reports when apache is reporting that an Internal Server error, a 500 error, has occurred.
[edit] Tuning Guidance
If you wish to shun on these alerts, just set Active Response in the ASL rule manager for rule 60816 to "yes".
Disabling this rule will not prevent these Internal Server errors in apache. It will simply "silence" the alert in ASL. Apache will continue to generate these errors, and you will not be alerted to them. We do not recommend you disable this rule.
[edit] Additional Information
[edit] Similar Rules
None.
[edit] Knowledge Base Articles
None.
[edit] Outside References
None.
