Hub
Web & Access

Apache HTTP Server

Apache httpd access and error logs — page/asset/API requests, bot crawlers (Googlebot, GPTBot), scanner probes, 3xx redirects, and correlated 4xx/5xx error log entries with module context.

Quick Start

uv tool install eventum-generator
git clone https://github.com/eventum-generator/content-packs.git
cd content-packs
eventum generate \
  --path generators/web-apache/generator.yml \
  --id apache \
  --live-mode true

Event Types

Event IDDescriptionFrequencyCategory
access-successSuccessful request (2xx/304)~68%web
access-botBot/crawler request~11%web
access-client-errorClient error (4xx)~9%web
access-redirectRedirect (3xx)~5%web
error-file-not-foundFile not found (error log)~3.2%web
access-server-errorServer error (5xx)~1.4%web
error-moduleModule error/warning~1.4%web
error-noticeOperational notice~0.9%web

Realism Features

  • Correlated access/error logs — 404 access events produce matching "File does not exist" error entries
  • Correlated server errors — 5xx access events produce matching module error entries
  • URL distribution — pages (30%), static assets (50%), API endpoints (20%)
  • Bot traffic — Googlebot, bingbot, YandexBot, AhrefsBot, GPTBot with correct UA strings
  • Attack surface probing — .env, wp-admin, phpMyAdmin, .git/config in 404 paths
  • Content-aware response sizes — CSS/JS/image sizes match real-world ranges; 304 returns 0 bytes

Sample Output

{
    "@timestamp": "2026-02-21T12:00:01.234567+00:00",
    "event": {
        "category": ["web"],
        "dataset": "apache.access",
        "module": "apache",
        "outcome": "success"
    },
    "http": {
        "request": { "method": "GET" },
        "response": { "body": { "bytes": 12847 }, "status_code": 200 }
    },
    "url": { "original": "/products", "path": "/products" },
    "user_agent": { "name": "Chrome", "original": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" }
}

Parameters

ParameterDefaultDescription
hostnamewebserver01Server hostname
domainexample.comWebsite domain name
agent_id9326664e-...Filebeat agent ID
agent_version8.17.0Filebeat version

Related Generators