Topic: Mod Security2 can't find any errors in the log

[selecta]

I have apache installed working perfect, mod_security2 configured but no errors are being reported in the log. Keeps displaying same message over and over again, here is an example below

httpd.exe: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Fri Oct 10 08:25:14 2008] [notice] Child 356: Child process is running
[Fri Oct 10 08:25:14 2008] [notice] Child 356: Acquired the start mutex.
[Fri Oct 10 08:25:14 2008] [notice] Child 356: Starting 64 worker threads.
[Fri Oct 10 08:25:14 2008] [notice] Child 356: Starting thread to listen on port 807.
[Fri Oct 10 15:47:40 2008] [notice] ModSecurity for Apache/2.5.6 (http://www.modsecurity.org/) configured.
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Fri Oct 10 15:47:40 2008] [warn] pid file C:/Program Files/Apache Software Foundation/Apache2.2/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?
[Fri Oct 10 15:47:41 2008] [notice] Apache/2.2.9 (Win32) configured -- resuming normal operations
[Fri Oct 10 15:47:41 2008] [notice] Server built: Jun 13 2008 04:04:59
[Fri Oct 10 15:47:41 2008] [notice] Parent: Created child process 576
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Fri Oct 10 15:47:42 2008] [notice] ModSecurity for Apache/2.5.6 (http://www.modsecurity.org/) configured.
httpd.exe: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1 for ServerName
[Fri Oct 10 15:47:43 2008] [notice] Child 576: Child process is running
[Fri Oct 10 15:47:43 2008] [notice] Child 576: Acquired the start mutex.
[Fri Oct 10 15:47:43 2008] [notice] Child 576: Starting 64 worker threads.
[Fri Oct 10 15:47:43 2008] [notice] Child 576: Starting thread to listen on port 807.

Don't know what am doing wrong can I get some information wth respect to what to do. It is quiet frustrating been trying all this while without much success.

Selecta

[James Blond]

I'm unused to mod_security, but in the FAQ there are some settings you can make. Like
SecAuditLog
SecAuditLog2
SecAuditLogParts
SecAuditLogRelevantStatus
SecAuditLogStorageDir
SecAuditLogType

I think in that logs will the messages from mod_security

MOD_SEC DOCS

[selecta]

I have added all the SecAudit stuff to the rules as you have indicated yet dont get the right results. I am using windows XP