Ability to globally disable detailed logging

[jvisker]

Is your feature request related to a problem? Please describe. From a security perspective it is concerning that detailed logging can be turned on so easily. Especially if we don't want it on ever.

Describe the solution you'd like Add a new config parameter that will allow us to disable detailed logging globally.

Describe alternatives you've considered We can just try to make sure that is never enabled on any of the APIs.

[zalbiraw]

Hello @jvisker that can definitely be done.

You can turn off detailed logging on gateway level, globally in Tyk Pump or per pump.

Hope this helps!

[jvisker]

You can turn it off on the pumps, but not at the gateway. On the gateway that flag controls the global default but still allows it to be overridden at the api and session level. I wouldn't want it to be overridden in this scenario.

[zalbiraw]

Ah gotcha!

[andyo-tyk]

The future of Tyk's analytics logging (as part of Observability) lies with Open Telemetry. We won't be implementing this suggestion as-is, however the additional flexibility that will be introduced with Open Telemetry should, I believe, meet your needs.