Is there a way to dump all active configuration values set in the various modsecurity config files at runtime, e.g. on restart of the web server (httpd)? I tried setting "SecDebugLogLevel" to 9 (the documented maximum) but the debug log file will only contain data pertaining to requests. E.g. the actual value SecArgumentsLimit would be interesting, but it's not in the file.

Is there a way to dump all active configuration values set in the various modsecurity config files at runtime, e.g. on restart of the web server (httpd)? I tried setting "SecDebugLogLevel" to 9 (the documented maximum) but the debug log file will only contain data pertaining to requests. E.g. the actual value SecArgumentsLimit would be interesting, but it's not in the file.

• mod-security
• mod-security2

1 Answer 1

Thanks for reporting this. Unfortunately, there is no such option to dump all configuration at runtime, but you can always debug nginx process to dump configuration, as mentioned in official docs: https://docs.nginx/nginx/admin-guide/monitoring/debugging/#dumping-nginx-configuration-from-a-running-process