owasp-modsecurity / owasp-modsecurity/ModSecurity-nginx
Feature: Configurable Log Level
@zimmerle is already working on this.
Since Jul 3, 2020.
- Dominant language
- Perl
- Stars
- 1.9k
- Forks
- 312
- PR merge metrics
- No merged PRs in 30d
Description
Would like this to be a environment variable we can set:
https://github.com/SpiderLabs/ModSecurity-nginx/blob/master/src/ngx_http_modsecurity_log.c#L33
ngx_log_error(NGX_LOG_INFO, (ngx_log_t *)log, 0, "%s", msg);
NGX_LOG_INFO is nice and appropriate likely for warning messages generally speaking. But info in many NGX deployments is too noisy regarding other things, so it would be nice if this was default to INFO but I could pick ERROR or DEBUG or NOTICE etc. Right now I drop in a patch file and run this line as:
ngx_log_error(NGX_LOG_ERROR, (ngx_log_t *)log, 0, "%s", msg);
Because that is the log level I want WAF detection information to run on for my use case.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.