1

Actually the module blocks calls with "notice" level. How can I decrease the severity level and take it to "warning"?

  • Can you rephrase your question and add more details (perhaps with log files showing the issue)? Is there a specify rule that is giving you a notice level alert? What do you "decrease" security from notice to warning? Surely that's an increase in security? – Barry Pollard Nov 07 '15 at 12:23

1 Answers1

0

You need to change SecDebugLogLevel value in whitelist.conf:

0: No logging

1: errors

2: warnings

3: notices

4: details of how transactions are handled

5: as above, but including information about each piece of information handled

6: log everything

more informations : http://resources.infosecinstitute.com/analyzing-mod-security-logs/

Froggiz
  • 3,013
  • 1
  • 18
  • 30