[mod-security-users] Disable all logging for mod_security

[Quinn C. <qu...@st...>]

We have a system running mod_security-2.5.9-1.el5.x86_64, and would like to disable the messages that appear in apache's error_log. I see it is possible to disable the debug and audit log using SecDebugLogLevel=0 and SecAuditEngine=off, but cannot find how to disable logging to error_log. It seems possible to disable it using the nolog action on a per-rule basis, but I assume there must be a way to do this using one configuration variable rather than editing hundreds of rules. Adding nolog to SecFilterDefaultAction doesn't work of course because individual rules override the inheritance.

Hmmm?

Thanks!
Quinn