Skip to main content
Version: 3.14.x.x LTS

Signed log

You may want to sign log messages to detect log data manipulations or loss of log data. Log signing can be configured by adding the qssign http://opensource.adnovum.ch/mod_qos/qssign.1.html tool to the chain of piped. When using more than one program in the pipe, set the SERVER_DETACH=1 variable within the env.conf file of your nevisProxy instance. log processing tools.

bc.properties configuration example:

BC.Tracer.LogFile=pipe:///opt/nevisproxy/bin/qssign -e -S
/var/opt/neviskeybox/default/log/node_keypass |/opt/nevisproxy/bin/bclogmgr
size=52428800 archives=2 /var/opt/nevisproxy/default/logs/navajo.log

navajo.xml configuration example:

TransferLog=""|/opt/nevisproxy/bin/qssign -e -s 12345 |/opt/nevisproxy/bin/bclogmgr
size=52428800 archives=2 /var/opt/nevisproxy/default/logs/access.log"

ErrorLog=""|/opt/nevisproxy/bin/qssign -e -s 12345 |/opt/nevisproxy/bin/bclogmgr
size=52428800 archives=2 /var/opt/nevisproxy/default/logs/apache.log"