[mod-security-users] WAF file and folder locations

[Peter B. <pet...@vs...>]

I'm looking for documentation (or a source file) listing the 
configurable folders of the WAF and their meaning.

When I look at a host we run, there are the following folders and files 
in `/modsecurity`:

- apache/
- audit/
- data/
- tmp/
- upload/
- modsec_audit.log
- virus-check.log

I need to know which folders (and files) are meant to contain data that 
is persisted (such as, probably, "audit" and "*.log") and which ones 
contain ephemeral data that we may mount somewhere where the OS throws 
the content away on, say, reboots (such as, probably, "tmp" and 
"upload").

Is there a specific documentation on this? Any hints that help me 
better understand are appreciated!

Peter