AuditLog

[Eyup-Devop]

Description

When using custom rule with chain, in audit log there is no chain rule. there is only main rule no chain rule.

"raw": "SecRule GEO:COUNTRY_CODE "@Within GB,GR" "id:1001,phase:1,msg:'country code',deny,status:403, logdata:'Matched Data: %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',chain"

"orijinal rule": "SecRule GEO:COUNTRY_CODE "@Within GB,GR" "id:1001,phase:1,msg:'country code',deny,status:403, logdata:'Matched Data: %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',chain"
"SecRule REQUEST_URI "@contains /wp-login.php"

is it normal or it has to full rule.

thanks

[M4tteoP]

Hey, it looks like it has been fixed via #985, can we close this?

[M4tteoP]

Thanks for this @Eyup-Devop!