Posts

Showing posts with the label ELMAH

Elmah Scan Exclusion

ELMAH  (Error Logging Modules and Handlers) is a fantastic logging tool for exception tracking in ASP.NET web applications. It captures almost every type of un-handled exception and it captures an incredibly detailed snapshot of what went wrong, making it an essential tool for diagnosing what went wrong on your website. However, the verbosity and spread of what is logged by ELMAH can be a double edged sword as meaningful, important errors can be lost in a sea of noise. Security Scans and a Clean ELMAH Log: Security scans can flood your ELMAH log in a matter of minutes. It is a good practice to frequently run scans on a production environment to find vulnerabilities, so skipping them is not an option. But, neither is omitting logging as production is the environment in which errors have the biggest negative impacts.  So, we must find a way to allow these two tools to coexist without hindering each other. Security scans work by "crawling" a website and trying every possib...