BunkerWeb log files configurable line prefix

General
1

Hi there all,

BunkerWeb save’s logs on the local nodes here /var/log/bunkerweb.
If ever possible, I would like to have the ability to add prefixes per lines.

I.E: for the access.log file:

[bunkerweb - access.log] bwapi 127.0.0.1 - 6d50037d62563b112acc337e488cdf5b - [27/Nov/2025:08:10:47 +0100] “GET /health HTTP/1.1” 200 43 “-” “bwapi”

That would help at matching the logs at say Wazuh or such.

If anyone has a better way of handling that, feel free to let me know about it. My goal would be to gather the bunkerweb logs files @Wazuh and having correct decoder/rules in place for BunkerWeb daily operations.

Thanks,

m.

2

Hi @mokaz,

You can tweak the LOG_FORMAT setting to do so: Features - BunkerWeb documentation

Regards,

Théophile.

1 Like
3

Thanks Théo / I’ll try that out !!