Firewall Logs Not Downloading

Hey @richcb7,

It is possible that the rules have been updated, and you can check by looking at the timestamp for /wp-content/wflogs/rules.php.

Can you confirm that the owner of the directory/files is the user the webserver runs as?

Could you also please go to Wordfence > Tools > Diagnostics and make sure that all checks in the Filesystem, Wordfence Config and MySQL sections read OK.

Thanks,

Gerroald

Wordfence Message:
The last rules update for the Wordfence Web Application Firewall was unsuccessful. The last successful update check was September 28, 2019 4:02 am, so this site may be missing new rules added since then. You may wait for the next automatic attempt or try to Manually Update by clicking the “Manually Refresh Rules” button below the Rules list.

Modified dated for /public_html/wp_content/wflogs is 10/04/19.

Wordfence > Tools > Diagnostics

Filesystem Ability to read/write various files.

Checking if web server can read from ~/plugins/wordfence
OK
Checking if web server can write to ~/plugins/wordfence
OK
Checking if web server can read from ~/wp-content/wflogs
OK
Checking if web server can write to ~/wp-content/wflogs
OK

Wordfence Config Ability to save Wordfence settings to the database.

Checking basic config reading/writing
Basic config writing
Checking serialized config reading/writing
Serialized config writing

MySQL Database version and privileges.

Database Version
5.6.45-86.1-log
Checking if MySQL user has DELETE privilege
OK
Checking if MySQL user has INSERT privilege
OK
Checking if MySQL user has UPDATE privilege
OK
Checking if MySQL user has SELECT privilege
OK
Checking if MySQL user has CREATE TABLE privilege
OK
Checking if MySQL user has ALTER TABLE privilege
OK
Checking if MySQL user has DROP privilege
OK
Checking if MySQL user has TRUNCATE privilege
OK

These look okay.

Hey @richcb7,

Thanks for the update.

Can you send me a Diagnostics report so I can get a better overview of your environment? Please navigate to Wordfence > Tools > Diagnostics. Here you can select SEND REPORT BY EMAIL. Please include your www.ads-software.com username and update this thread after you’ve sent it.

Thanks,

Gerroald

What email address do you want me to send it to?

Or should I just cut and paste here?

Oh, Okay, The email is already there. It has been sent.

User is richcb7

Hey @richcb7,

Can you try deleting the wflogs directory and let it regenerate itself to see if it helps? It will usually regenerate itself within 30 minutes.

Please give this a try and let me know if it helps.

Thanks,

Gerroald

I removed the wflog folder and it was restored, but the problem persisted.

While looking at the folders they reminded me that the Host had created a folder of a Staging Site backup so I could download it. When I tried to delete it, it would not allow me because the owner was Host root. I contacted the Host and they removed the folder and we reset any erroneous permissions.

I then went in and deleted the wflog folder again. It is now working, but Wordfence is now in Learning Mode.

Apparently, everything has been reset. Wordfence is now in Learning mode again.