name: Apache Access Log
id: 6ea32d4e-e6d0-4ceb-88d0-2b640457c894
version: 1
creation_date: '2026-10-22'
modification_date: '2026-10-22'
author: Nasreddine Bencherchali, Raven Tait, Splunk
description: Apache HTTP Server access log events including client address, request method, URI, response status, and response size.
mitre_components:
    - Network Traffic Content
    - Network Traffic Flow
    - Response Metadata
    - Application Log Content
    - User Account Metadata
source: /var/log/apache2/access.log
sourcetype: access_combined
fields:
    - _time
output_fields:
    - dest
example_log: |-
    198.51.100.3 - - [21/Oct/2026:23:22:28 +0000] "GET /vuln.php?page=/var/lib/php2shell-lab/sessions/sess_example HTTP/1.1" 200 604 "-" "-"