AppProtect Logs with sensitve Information

[sass1997]

Is there a log level in NGINX App Protect WAF that ensures no potentially sensitive information is included in the logs? I'm looking for a configuration that allows the application to run in a normal mode, providing information only about blocked or allowed requests, without including any details or complete request contents that might contain sensitive data.

[vepatel]

Hi @sass1997, you can see WAF specific docs at https://docs.nginx.com/nginx-app-protect-waf/v5/logging-overview/security-log/ and log an F5 ticket for better support as it's not an OSS project

[vepatel]

@sass1997 just a follow-up on this, are you using AppProtect v4 or v5? please include that info in the ticket