Struct LogCfg 

pub struct LogCfg {
    pub query: QueryLogMode,
    pub redact_params: Vec<String>,
    pub ship: LogShipCfg,
}

[log] — what the access log records.

Access logs are the most-copied artifact a service produces: scraped, shipped to a SIEM, retained for months, readable by people who were never meant to hold what is in them. The request line is where credentials end up (?api_key=, OAuth ?code=, magic links, presigned URLs), so how it is rendered is a security setting, not a formatting one.

Fields

query: QueryLogMode

"redact" (default), "drop", or "full" — see QueryLogMode.

redact_params: Vec<String>

Extra query-parameter names to treat as sensitive, on top of the built-in list. Matched case-insensitively as substrings, so "accountNumber" also covers account_number_v2.

ship: LogShipCfg

Ship the access log to a collector. Off by default. See LogShipCfg.

Trait Implementations

impl Clone for LogCfg

fn clone(&self) -> LogCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LogCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LogCfg

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for LogCfg

where LogCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.