Huge modsec_audit.log file

[imorandin]

Hi Bogdan,

I think I may have found the root cause.

The issue seems to have started after increasing the request body limits...

[imorandin]

After some additional digging, I've noticed that you have to remove the "I" also to remove the body.

But now I've discovered yet...

[imorandin]

Thanks bodgan,

I've added SecAuditLogParts in that file but apache still logs full body after restarting:



My /etc/apache2/conf.d/modsec/modsec2.user.conf...

[imorandin]

We noticed that /var/log/apache2/modsec_audit.log is becoming extremely large because ModSecurity is logging full client requests. We have one customer...