All products List a security policy's settings for attack payload logging. Attack payload logging is on by default, and in most cases you should leave it enabled. When set to NONE, the request body and response body appear as redacted in the log. For example, JSON_PAIRS:redacted. This operation applies at the security policy level, and overrides the attack payload logging settings at the configuration level on a per-policy basis.