How to configure Apache to log POST request data

Apache servers typically log basic request information such as the client’s IP address, requested URL, and response status code. However, the actual data sent in a POST request is not logged by default, which can be important for tasks like debugging or monitoring.

To capture POST request data, you must enable specific modules and configure Apache appropriately. This includes modifying configuration files and ensuring that the server listens for the data. Logging POST data involves handling sensitive information, so it's crucial to adhere to privacy regulations and best practices.

Additionally, enabling this logging may lead to larger log files and potential performance impacts. Careful configuration and management are needed to ensure that Apache logs the necessary data without compromising the server's efficiency.

1. Enable the mod_dumpio module on your Apache server.

   $ sudo a2enmod dump_io # Ubuntu and Debian
   Enabling module dump_io.
   To activate the new configuration, you need to run:
     systemctl restart apache2
   $ sudo a2enmod dumpio # SUSE

   • Distribution with a2enmod support can simply run the command above without having to manually enable the required modules.
   • Fedora, CentOS and Red Hat enables the module by default so requires no manual action to enable the modules.

   Related: How to enable or disable Apache modules

   Options	Debian, Ubuntu	openSUSE and SLES	Fedora Core, CentOS, RHEL	macOS	homebrew	xampp
   a2enmod support	yes	yes	no	no	no	no
   Modules to install	none
   Module name	n/a			dumpio
   Loadmodule directive	n/a			LoadModule dumpio_module <module_locations>/mod_dumpio.so

2. Open the Apache VirtualHost configuration file for your website.

   $ sudo vi /etc/apache2/sites-enabled/000-default.conf

   Related: Location for Apache VirtualHost configuration files

3. Add the following directives to enable mod_dumpio and set the desired log level.

   <VirtualHost *:80>
     ##### snipped
    
     DumpIOInput On
     DumpIOOutput On
     LogLevel dumpio:trace7
   </VirtualHost>

   Directive	Description
   DumpIOInput	Enables or disables the logging of input data (like POST data). On means it's enabled.
   DumpIOOutput	Enables or disables the logging of output data sent from the server to the client. On means enabled.
   LogLevel	Sets the verbosity level of the logs. dumpio:trace7 is one of the most verbose levels.

4. Save and exit the text editor.
5. Restart Apache to apply the changes.

   $ sudo systemctl restart apache2 # Ubuntu, Debian, openSUSE and SLES
   $ sudo systemctl restart httpd # CentOS and Red Hat

   Related: How to manage the Apache web server service

6. Send a POST request to test the logging configuration.

   $ curl -XPOST --data "field01=value01&field02=value02" 127.0.0.1

7. Check the Apache error log to verify that the POST data is being logged.

   $ sudo grep field01  /var/log/apache2/error.log
   [Sat Sep 02 07:22:55.645309 2023] [dumpio:trace7] [pid 3455:tid 281473037431072] mod_dumpio.c(100): [client 127.0.0.1:37492] mod_dumpio:  dumpio_in (data-HEAP): field01=value01&field02=value02

   Consider disabling mod_dumpio or adjusting the log level to reduce the verbosity once you've finished debugging or monitoring. This will help in maintaining the performance and security of your server.