Modsec logging architecture

Please read up on the architecture first

Debugging

The first place to look is in the fluent bit side car logs:

stern modsec --container flb-modsec-audit-logs -n ingress-controllers

This should give you a clue to the issue. Once you resolve this issue, logs may not immediately come back. This might be because logs are stuck retrying. If this is the case, then restart the deployment:

kubectl rollout restart deployment/nginx-ingress-modsec-controller -n ingress-controllers

This page was last reviewed on 15 July 2025. It needs to be reviewed again on 15 January 2026 by the page owner #cloud-platform .

This page was set to be reviewed before 15 January 2026 by the page owner #cloud-platform. This might mean the content is out of date.