WafRuleLog
{
"matches": [
{
"is_internal": false,
"match_element": "string",
"match_value": "string",
"match_value_offset": 0
}
],
"msg": "string",
"omitted_match_elements": 0,
"phase": "string",
"rule_group": "string",
"rule_id": 0,
"rule_name": "string",
"tags": [
"string"
]
}
Transaction data that matched the rule. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
Rule's msg string per ModSec language. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
The count of omitted match element logs in the current rule. Field introduced in 22.1.1. Allowed in Enterprise edition with any value, Enterprise with Cloud Services edition.
Phase in which transaction matched the Rule - for instance, Request Header Phase. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
Rule Group for the matching rule. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
ID of the matching rule per ModSec language. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
Name of the rule. Field introduced in 17.2.3. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.
Rule's tags per ModSec language. Field introduced in 17.2.1. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.