See <ahref="http://httpd.apache.org/docs/current/mod/core.html#loglevel"class="urlextern"title="http://httpd.apache.org/docs/current/mod/core.html#loglevel"rel="nofollow">http://httpd.apache.org/docs/current/mod/core.html#loglevel</a> for more information.
You can also hide sensitive values in logs (session content can be displayed in logs in debug loglevel). Go in Manager, <code>General Parameters</code>><code>Logging</code>><code>Hidden attributes</code> and set a list of attributes to hide (space separated).
<liclass="level1"><divclass="li"><strong>notice</strong> for good authentications or external exchange (<abbrtitle="Security Assertion Markup Language">SAML</abbr>, OpenID,…)</div>
<spanclass="re1">userError</span><spanclass="sy0">=</span><spanclass="re2"> sub <spanclass="br0">{</span> my <spanclass="br0">(</span>$self, $message<spanclass="br0">)</span> = @_</span><spanclass="co0">; ... }</span>
<spanclass="re1">userNotice</span><spanclass="sy0">=</span><spanclass="re2"> sub <spanclass="br0">{</span> my <spanclass="br0">(</span>$self, $message<spanclass="br0">)</span> = @_</span><spanclass="co0">; ... }</span></pre>