Hit rule and record request_body log.

[opsmeta]

Can ModSecurity v3 pass relevant environment variables to Nginx for judgment?
For example, nginx access_log request_body defaults to empty, and when a WAF rule is hit, access_log will record the value of request_body.

[airween]

Hi @opsmeta,

libmodsecurity3 (and the Nginx connector) has no effect on the access.log file.

Only error.log which filled by the library through the connector, but there is no chance to configure its format.

If you want to access to request_body if a rule hit, you should check SecAuditLogParts and other audit.log settings.

[opsmeta]

Can setenv foo: bar pass variables to nginx for recognition and judgment?

[airween]

Can setenv foo: bar pass variables to nginx for recognition and judgment?

No, unfortunately that function hasn't implemented yet.