Re: [mod-security-users] Logging-Questions

[Ivan R. <iv...@we...>]

Jens Weibler wrote:
> Hi,
> 
> two questions about the logging in mod_Security :)
> 
> - how can I get an audit-logentry for "log,pass"-action? I only get an entry in
> the error_log

   That does not appear to work properly in 1.8.7. It is already fixed
   in 1.9, but I will check it once more before the final release (should
   be out by the end of July).


> is there a way to get two audit-logs? One relevant-only and the other
 > with all requests?

   At the moment, no. Why do you need that for? Audit logging is
   I/O intensive operation as it is, I imagine having multiple logs
   would bring a web server down to a crawl.

-- 
Ivan Ristic
Apache Security (O'Reilly) - http://www.apachesecurity.net
Open source web application firewall - http://www.modsecurity.org