You may want to report the issue to ConfigServer so they can update their application to support the logging changes implemented when Mod_Security and Mod_Ruid2 are enabled. Other than the path difference, is it causing any actual functionality issues?
Thank you.
I will try to report this to ConfigServer.
The entries in the modsec_audit log changed when I ran upcp --force to apply the fix, as they got much less informative and made me a bit confused by the changes. But the logs in the new logging directories do have these entries as before in the same manner so it seems to be working normally.
But these entries are not as easily accessible as the entries in the modsec_audit log where you just have to access the log in /usr/local/apache/logs, while the more informative logs in the new logging directories are on multiple levels by timestamps which I'm not used to when checking logs.
The below image is a tree view of the logs location in /usr/local/apache/logs/modsec_audit/nobody directory.
