Apache Integration for Sumo Logic

Collect, centralize and transform your Apache access logs and error logs into visualizations that would transform your data into insightful information. Apache app is not just an aggregation of your access logs or error logs—the app lets you:

• Monitor across disparate sets of Apache data and uncover hidden business opportunities and issues.
• Trace customer sessions and behavior, correlate and find issues that span across your web servers and other parts of the application tier (e.g. databases, SANs).
• Investigate any visitor activity and drill down to the smallest activities in any time frame.
• Discover and resolve bottlenecks in your Apache HTTPD configuration.
• Investigate top geo locations of your visitors.
• Get insights to overall traffic patterns and distribution.
• Understand the volume of traffic being served, including the bytes that were served out.
• Set alerts for any specific IP or error requests, so you can take proactive action.

How can Apache logs help you improve your security posture?

Apache logs contain critical data on your users. The right analysis of your Apache logs can help you move from reactive to proactive. A new approach takes the power of big data and advanced analytics and applies them to end-user behavior. It detects anomalies (deviations from the established baseline) and flags exceptions in real-time to help you identify real and potential threats.

Sumo Logic can help you get there. When you use Sumo Logic as an Apache security log analyzer, you can:

• Get visibility into which assets users are logging in to.
• Identify the ports and protocols typically used.
• Receive alerts based on behavioral changes.

The Sumo Logic App for Apache uses the default error log file format.

Sumo Logic App for Apache provides visualizations for visitor breakdown by device, geography, operating systems and versions

• Leverage Transaction Analytics to easily detect events in complex transactions.
• Visualize access log data to drill down into visitors demographics.
• Understand all the devices being used by your customers.
• Drill down on browsers and operating systems used by visitors to prioritize value-added features into your application for customers.
• Define future requirements and optimize experiences based on usage and geo location trends.

Learn more about installation, collecting logs and setting up dashboards by visiting the Sumo Logic App for Apache documentation.

Sumo Logic offers the Apache Log Analyzer Online as part of our service. The full app includes:

• Predefined parsers
• Prebuilt dashboards
• Prebuilt searches
• Ability to create custom dashboards and searches

When you start realizing the value Apache logs can provide to you and your operations team, there are three steps you can take to get the most value from your Apache access logs:

Get your logs into one place: Sumo Logic provides lots of different ways to do this.

Jump-start your implementation: Getting started with log analysis can be difficult to do if you haven't done it before. Sumo Logic provides an Apache application with built-in best practices that provides easy-to-use dashboards and sample searches to get you started quickly.

Decide what is most important to you: You can't improve what you can't measure, and you can't measure it if you don't know what "it" is. Now that you have the data and you know how to extract value, look at the most important metrics for your business.

Learn how to customize Sumo Logic for your Apache server environment in our documentation.

To find issues that may require closer attention, explore the capabilities of a SaaS analytics service like Sumo Logic, which uncovers insights that are easily overlooked by the human eye and difficult to find via basic logging.

Using an Apache log parser, Sumo Logic extracts the only values that are of interest, such as:

• Pageviews
• User names
• IP address
• Geographic location of users
• 404 and 500 errors

This makes it possible to aggregate, visualize, and analyze the data, which Sumo Logic facilitates through prebuilt searches and dashboards for real-time and historical access. The robust capabilities within Sumo Logic make it possible to:

• Centralize your logs for aggregation and correlation activities
• Search across and analyze all logs in your infrastructure stack with robust search and advanced analytics capabilities
• Monitor and detect trends in system events, user activity and more
• Visualize trends and detect anomalies and patterns
• Alert key stakeholders of critical or abnormal system activity or user behavior

Apache Log Analyzer: Free Edition

Sumo Logic offers a free service that allows you to analyze traffic by total volume and hits, total traffic by each server, and hits and volume by URL.

The free edition includes access for one to three users and the following features:

• LogReduce Analytics
• Data Collection (any source)
• Outlier Detection
• Predictive Analytics
• Live Streaming Dashboards
• Powerful Search
• PCI, SOC 2 Type 2, HIPAA Certifications
• 7 Days Data Retention

Enterprise Edition Free Trial

Get a free 30-day trial of Sumo Logic Enterprise edition, customized to your team’s needs.

Apache access logs can be configured to write log data in various formats, such as common log format, combined log format, multiple access logs, and conditional formatting. To learn more about the various access log formats, visit Apache Logs at Apache Project - Log Files.

Sumo Logic has a built-in Apache access logs parser that can be applied to quickly analyze and visualize your logs without bothering to write regex to parse access logs.

• In the Search interface you can type any keyword (or * wildcard)
• Pipe the results through the Apache parser with [code language="sql"]

Read more:
How to Monitor Apache Web Server

Apache error logs provide detailed operational data about the Apache web server, like start and stop of server, diagnostic information on issues with processing certain requests that are being sent over, and more. Using these logs, you can match error codes with corresponding requests.

Sumo Logic has a built-in Apache error logs parser that can be applied to quickly analyze and visualize your logs without bothering to write regex to parse error logs:

• • • • In the Search interface you can type any keyword (or * wildcard) you would like to be searched
      • Pipe the results through the Spache parser with

[code language="sql"]