Advanced
Mailing List Archive

Mailing List Archive

  1. Home >
  2. Apache>
  3. Users
Question Error apache
nachoherrerias at gmail
Nov 6, 2023, 3:03 AM
Post #1 of 2 (81 views)
Permalink
I have a problem with Apache. Now and then i get an alert from my SIEM,
telling me this: auditd: process ended abnormally type=ANOM_ABEND
msg=audit(1699052664.898:938628): auid=4294967295 uid=1001 gid=1002
ses=4294967295 pid=32043 comm="httpd" exe="/usr/sbin/httpd" sig=7 res=1
AUID="unset" UID="censored" GID="censored"

The thing is that Apache (2.4.58) is working fine, and its been working the
all time, what can I do to stop getting this error from Apache?
Re: Question Error apache [ In reply to ]
dferradal at apache
Nov 9, 2023, 1:33 PM
Post #2 of 2 (70 views)
Permalink
El lun, 6 nov 2023 a las 12:05, Nacho Herrerías (<nachoherrerias@gmail.com>)
escribió:

> I have a problem with Apache. Now and then i get an alert from my SIEM,
> telling me this: auditd: process ended abnormally type=ANOM_ABEND
> msg=audit(1699052664.898:938628): auid=4294967295 uid=1001 gid=1002
> ses=4294967295 pid=32043 comm="httpd" exe="/usr/sbin/httpd" sig=7 res=1
> AUID="unset" UID="censored" GID="censored"
>
> The thing is that Apache (2.4.58) is working fine, and its been working
> the all time, what can I do to stop getting this error from Apache?
>


If Apache HTTPD shows nothing in its error.log, then your SIEM is not
functioning correctly.

--
Daniel Ferradal
HTTPD Project
#httpd help at Libera.Chat

©2024 GT.net. A Gossamer Threads company.
5th Floor, 455 Granville St., Vancouver, BC V6C 1T1, Canada | Legal