I am upgrading VM pro on CentOS 6.6 with Apache 2.2.16 to CentOS 7 with Apache 2.4.6. One thing I've noticed is that there seems to be a change in the Apache log format. So previously an error would be e.g.
[Sun Dec 28 09:08:46 2014] [error] etc etc
That's now eg
[Sun Dec 28 16:26:22.703615 2014] [cgi:error] [pid 13742] or
[Sun Dec 28 16:21:11.368100 2014] [fcgid:warn] [pid 13396] etc
The problem is that I use OSSEC for log analysis, and so this is screwing up the decoding of the logs.
Does anyone know where this log difference comes from? is it configurable - in other words have I simply got the wrong log option set somewhere which is causing this difference? (That's the answer I'm hoping for!). Is it a Virtualmin feature or tweak? Or maybe it's just a drop-off from OSSEC (I did do a clean install to CentOS 7, so you would think it *should* understand/guess the right log format?).