HTTP Header Logging

• Log all HTTP headers—Captures every request and response header.
• Request Headers—Add specific request headers to capture. Each entry has a per-header Max Header Length and Truncate Headers override. Request headers can contain personally identifiable information (PII) such as cookies and authorization tokens; a privacy notice appears when you first enable request header logging.
• Response Headers—Add specific response headers to capture. Each entry has a per-header Max Header Length and Truncate Headers override.
• Enable logging of response code in HTTP response—The HTTP response status code is captured in every response log entry. When response header logging is disabled or no response headers are matched, enabling this option forces a response log entry to capture the status code.
• Max Header Length—Maximum bytes to capture per header value (1–4,092). The limit applies to the header value only, excluding the header name, colon, and whitespace. Individual headers in the Request Headers or Response Headers tables can override this value. If set to 1 with Enable truncation of headers that exceed the max header length limit enabled, only the header name is logged.
• Enable truncation of headers that exceed the max header length limit—When enabled, captures headers up to the Max Header Length limit. When disabled, headers that exceed the limit are not logged.