Access Logging Disabled

What This Rule Checks

This rule checks if access logging is disabled.

Why It Matters

Access logs record every request to your server. Without them, you can't debug issues, monitor traffic patterns, detect attacks, or comply with audit requirements. The performance cost of logging is minimal.

✗ Bad — Triggers this rule

server {
    access_log off;
    # No record of any requests
}

✓ Good — Passes this rule

server {
    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log warn;
}

How to Fix

Enable access logging in Configen's Logging section. Set the log path to a location with adequate disk space.

Related Rules