Logging

Hi,

Where can I check the CWAF logs to see what attacks have been stopped? I’ve done some test attacks that were stopped with a 403, however they don’t appear in the WHM Mod Security panel. I also can’t find a log under var/logs/CWAF which appears to show the attacks.

Thanks!

Try the path below.

/usr/local/apache/logs/modsec_audit.log