Difference between revisions of "HIDS 60816"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "{{Infobox |header1= Rule 60816 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Internal Server Error. The server encountered an unexpected condition which ...")
 
m
 
Line 11: Line 11:
 
This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache.
 
This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache.
  
'''These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause the blocking action or alert.  ASL is just reporting that apache is reporting a 500 error has occured.'''   
+
'''These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause either the alert or the internal error in apache.  ASL is just reporting that apache is reporting a 500 error has occured.'''   
  
 
== Details ==
 
== Details ==

Latest revision as of 18:15, 15 February 2016

Rule 60816
Status Active
Alert Message Internal Server Error. The server encountered an unexpected condition which prevented it from fulfilling the request.

Contents

[edit] Description

This rule is triggered when ASL detects that an Internal server error, a 500 error, has occurred in Apache.

These events are not triggered, caused, configured or managed by by ASL, and ASL does not cause either the alert or the internal error in apache. ASL is just reporting that apache is reporting a 500 error has occured.

[edit] Details

This rule is designed to detect when apache has generate an Internal server error, a 500 error.

ASL will not shun, by default, on these events however if you wish to have ASL block on these events please see the Tuning Advice section below.

Disabling this rule will not prevent apache from generating these 500 errors. It will simply "silence" the alert in ASL, however the 500 errors will continue in Apache.. We do not recommend you disable this rule.

[edit] Troubleshooting

[edit] False Positives

None. This rule is not caused by ASL. ASL merely reports when apache is reporting that an Internal Server error, a 500 error, has occurred.

[edit] Tuning Guidance

If you wish to shun on these alerts, just set Active Response in the ASL rule manager for rule 60816 to "yes".

Disabling this rule will not prevent these Internal Server errors in apache. It will simply "silence" the alert in ASL. Apache will continue to generate these errors, and you will not be alerted to them. We do not recommend you disable this rule.

[edit] Additional Information

[edit] Similar Rules

None.

[edit] Knowledge Base Articles

None.

[edit] Outside References

None.

Personal tools