README.md in fluent-plugin-modsecurity-0.1.2 vs README.md in fluent-plugin-modsecurity-0.1.3
- old
+ new
@@ -1,11 +1,43 @@
# fluent-plugin-modsecurity
-fluentd plugin for modsecurity log
+fluentd plugin for modsecurity log. Enable modsecurity audit log 2 to export nginx access log like block log. Detail log path included in audit log2. Read and combine the detail log record by this plugin.
[](https://travis-ci.org/kaija/fluent-plugin-modsecurity)
-# td-agent config
+## Build / Install
+
+
+```
+#self build and install
+gem build fluent-plugin-modsecurity.gemspec
+sudo td-agent-gem install fluent-plugin-modsecurity-0.1.2.gem
+
+or
+
+#install from public rubygems
+sudo td-agent-gem install fluent-plugin-modsecurity
+
+```
+
+
+## modsecurity setting
+
+```
+#setup modsecurity audit log 2
+SecAuditLog2 /var/log/modsec/audit.log
+
+#set detail audit log storage dir
+SecAuditLogStorageDir /var/log/modsec
+
+#change log file and dir permision for td-agent
+SecAuditLogFileMode 0644
+SecAuditLogDirMode 0755
+
+```
+
+
+## td-agent config
```
# (1) Consume the input by tail and tag modsecurity
<source>