Skip to content

Commit a7ed9cb

Browse files
committed
Adding missing variables / directives (PERF_ALL, STATUS_LINE)
1 parent 9ff0d9e commit a7ed9cb

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

Reference-Manual.mediawiki

+19
Original file line numberDiff line numberDiff line change
@@ -2171,6 +2171,13 @@ Contains the extra request URI information, also known as path info. (For exampl
21712171

21722172
<code>SecRule PATH_INFO "^/(bin|etc|sbin|opt|usr)" "id:33"</code>
21732173

2174+
== PERF_ALL ==
2175+
This special variable contains a string that’s a combination of all other performance variables, arranged in the same order in which they appear in the Stopwatch2 audit log header. It’s intended for use in custom Apache logs
2176+
2177+
'''Version:''' 2.6.0-2.9.x
2178+
2179+
'''Supported on libModSecurity:''' TBI
2180+
21742181
== PERF_COMBINED ==
21752182
Contains the time, in microseconds, spent in ModSecurity during the current transaction. The value in this variable is arrived to by adding all the performance variables except PERF_SREAD (the time spent reading from persistent storage is already included in the phase measurements).
21762183

@@ -2572,6 +2579,18 @@ SecRule SESSION:blocked "@eq 1" "phase:2,id:73,deny,status:403"
25722579
== SESSIONID ==
25732580
This variable contains the value set with setsid. See SESSION (above) for a complete example.
25742581

2582+
== STATUS_LINE ==
2583+
This variable holds the full status line sent by the server (including the request method and HTTP version information).
2584+
2585+
<pre>
2586+
# Generate an alert when the application generates 500 errors.
2587+
SecRule STATUS_LINE "@contains 500" "phase:3,id:49,log,pass,logdata:'Application error detected!,t:none"
2588+
</pre>
2589+
2590+
'''Version:''' 2.6.0-2.9.x
2591+
2592+
'''Supported on libModSecurity:''' No
2593+
25752594
== STREAM_INPUT_BODY ==
25762595
'''Version:''' 2.6.0-2.9.x
25772596

0 commit comments

Comments
 (0)