Logs
The Logs tab configures attack log recording and log retention behaviour.
Options
| Option | Default | Description |
|---|---|---|
| Log Attacks | (enabled) | When enabled, every blocked request is recorded in the SecurityCheck Pro log database. Disable only if you are experiencing significant database growth due to high attack volume. |
| Add Access Attempts Logs | (disabled) | When enabled, permitted requests from whitelisted IPs are also logged with an IP_PERMITTED entry, providing an audit trail. |
| Log Limits per IP and Day | 0 | Maximum number of log entries recorded per IP address per day. Set to 0 for unlimited. Use this to prevent a single aggressive attacker from flooding the log table. |
| Log Delete Period | (days) | Number of days after which old log entries are automatically deleted. Set to 0 to disable automatic deletion. |
Disabling log recording removes the ability to review attack history in the View Logs page. System Info will also report Unread Logs as 0 regardless of actual activity.
Debug mode
Available since version 5.2.0, the debug mode records a trace of every decision the firewall takes (lists evaluation, filters applied, exceptions matched) for a limited number of hours, after which it disables itself automatically. It is designed for support: when reporting an issue, enable it, reproduce the problem, download the trace file and attach it to your support request.
- Sensitive data (tokens, passwords, cookies) is masked in the trace.
- The trace file can be downloaded and deleted from this same tab.
- Enabling, disabling or downloading the trace requires a user with core.admin (configuration) permission on the component.
