Thank you very much, but searching for SecAuditLog also led to nothing, everything looks okay, and there are no directives with "off".
For now, I will keep the system as it is since the WAF is working correctly, and I hope a future update will resolve it automatically.
Thank you very much, but this operation didn't solve the problem. I still see the error log, but not the detailed logs in modsec_audit.log.
By any chance, do you know which configuration file contains the directives for writing to the modsec_audit.log file?
Thank you but no, it is active.
In the website's error logs, ModSecurity logs with 403 errors returned to the client are present.
For example: ModSecurity: [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/20_asl_useragents.conf"] [line "187"] [id "332039"] [rev "4"] [msg "Atomicorp.com...
Hi guys, i have Plesk installed on AlmaLinux 8.10 (Cerulean Leopard) with Plesk Obsidian 18.0.70.
For some days now, ModSecurity (Atomicorp) has not been logging events for some domains to the modsec_audit.log file.
However, the WAF is working correctly, as its actions are clearly shown in the...
Thank you Peter, unfortunately there is no procedure that allows me to reproduce the error. The waf seems to go down when apache is restarted overnight.
I've check panel.log and messages logs and they show no errors.
Same here, every night it stops working, I have to restart the waf every morning.
It's frustrating, wafs have been having problems for months.
I have the paid version of Atomicorp.
For a few days, after the nightly update, modsecurity hasn't restarted.
I have this problem on 3 different plesk installations.
To restart it I have to disable it and re-enable it again from the plesk panel
If I set weekly updates the problem doesn't happen.
Thank you Igor, the problem was that after the decompression, the file had not any extension.
To solve the problem and gain access to the files, it is necessary to add a .tar extension. I hope it will usefull.
I discovered today the new backup format of plesk.
I have downloaded my backup files, extract them with 7z-ZS or Peazip but the file/folder decompressed is not possible to open.
How can I access at the file below?
Thanks