How can ModSecurity logs be viewed in Plesk for Windows?

Question

• How can ModSecurity logs be viewed in Plesk for Windows?
• Where are ModSecurity logs for domains stored on a Windows sever that runs Plesk?

Answer

On a Windows server running Plesk, Web Application Firewall (ModSecurity) logs ModSecurity audit logs are domain-specific and located in %plesk_dir%ModSecurity\vhosts\<domain's GUID>\logs (in most cases this will equal the full path C:\Program Files (x86)\Plesk\ModSecurity\vhosts\<domain's GUID>\log)
 

The easiest way to view them for any specific domain is to follow these steps:

1. Log into Plesk.

2. Go to Domains > example.com > Logs > Manage Log Files:

3. Press on the audit.log file

This will take you to a page that will allow you to view log entries and search for things such as IP addresses and specific errors.

Additional information

Web Application Firewall (ModSecurity) | Plesk Obsidian documentation