NGINX Web Server

Applies to: NGINX installed on the Linux-based operating system and Microsoft Windows-based operating system.

Overview

The NGINX is a web server that can also be used as a reverse proxy, load balancer HTTP cache, and a generic TCP/UDP proxy server.

EventTracker helps to monitor events from the NGINX Web Server. Its dashboard and reports will help you track the user requests which are suspicious with reference to SQL injection, access logs with a bad request, and user requests which are suspicious with reference to Cross-site Scripting.

EventTracker Knowledge Pack for NGINX Web Server allows you to monitor the following components:

Security - Information related to the suspicious activities concerning the web attacks.
Operation - Information related to the server error and client access errors.

Previous Next

After the NGINX Web Server is configured to deliver events to the EventTracker Manager, the dashboards and reports can be configured into EventTracker.

Security

Reports

NGINX web server - Client errors: This report provides a detailed summary of access logs with bad requests (error code 4XX). It contains a remote IP address, user-agent, remote username, and more.
NGINX web server - SQL injection: This report provides a detailed summary of user requests which are suspicious to SQL injection. It contains a remote IP address, user-agent, remote username, and more.
NGINX web server – Cross-site scripting: This report provides a detailed summary of user requests which are suspicious for Cross-site Scripting. It contains a remote IP address, user-agent, remote username, and more.

Operations

Reports

NGINX web server -Access logs: This report provides a detailed summary of Access logs. It contains a remote IP address, user-agent, request URL, remote username, and more.
NGINX web server – Server errors: This report provides a detailed summary of Server Errors. It contains a client IP address, and an error Message.

Scope

The configuration details are consistent with EventTracker version 9.3 and later, and NGINX installed on the Linux-based operating system and Windows-based operating system.

Documentation

To configure the NGINX Web Server to send logs to EventTracker, refer to the How-to Guide.