how do i only log (audit) requests (get and post parameters) to php scripts with modsecurity?

i dont want the static content to fill up my logs

Right now i m having everything logged.

i tried RelevantOnly but then nothing gets logged. I found this could be used in version 1.9 for php-only-logging but where did it go in 2.5? Here is my configfile:

<IfModule mod_security2.c>
 #Basic configuration options
      SecRuleEngine DetectionOnly
      SecRequestBodyAccess On
      SecResponseBodyAccess Off
#SecFilterScanPOST On
      # Handling of file uploads
      # TODO Choose a folder private to Apache.
      # SecUploadDir /opt/apache-frontend/tmp/
      SecUploadKeepFiles Off

      # Debug log
      SecDebugLog /var/log/apache2/modsec_debug.log
      SecDebugLogLevel 3

      # Serial audit log
      SecAuditEngine On
# RelevantOnly
     # SecAuditLogRelevantStatus "^(?:5|4(?!04))"
      SecAuditLogParts ABIFHZ
      SecAuditLogType Serial
      SecAuditLog /var/log/apache2/modsec_audit.log
</IfModule>
link|improve this question
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown

Browse other questions tagged or ask your own question.