security_content/data_sources/apache_error_log.yml at develop · debugactiveprocess/security_content · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
name: Apache Error Log
id: 4abf5ed1-29c9-4d57-8b1b-56cbd793557c
version: 1
creation_date: '2026-10-22'
modification_date: '2026-10-22'
author: Nasreddine Bencherchali, Raven Tait, Splunk
description: Apache HTTP Server error log events including PHP runtime errors, client addresses, and proxy or PHP-FPM backend errors.
mitre_components:
    - Network Traffic Content
    - Network Traffic Flow
    - Response Metadata
    - Application Log Content
    - User Account Metadata
source: /var/log/apache2/error.log
sourcetype: apache:error
fields:
    - _time
    - src
output_fields:
    - src
example_log: |-
    [Wed Oct 21 23:17:54.944504 2026] [php:error] [pid 50519:tid 50519] [client 10.3.99.1:44076] PHP Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 102400 bytes) in Unknown on line 0