Empty modsec_audit log

[Josh12]

I'm testing Plesk 12.1 and noticed after enabling ModSecurity, the modsec_audit log file is empty. Could you point me in the right direction to find the problem?

I'm running CentOS7.1 w/Plesk 12.1.23

Thanks!

 

[IgorG]

Check this thread - https://talk.plesk.com/threads/after-mod-security-logrotate-new-log-is-empty.306203/

 

[Josh12]

Hi Igor, thank you for the response.
I went ahead and followed the advice in the thread you linked to. First I disabled mod_security, then I edited modsecurity's logroate config to the following,

/var/log/modsec_audit.log {
daily
rotate 7
missingok
compress
postrotate
systemctl restart httpd
endscript
}

Then I re-enabled Mod_security, restarted apache (again running systemctl restart httpd) and then tailed the modsec log. Unfortunately the log was still empty
Did I miss something?

Thank you,
~ Josh