Is there any way I can enable more logging information? Like Cerbos logs that it did process some request, but it doesn't process what the result was, nor why, nor what conditions the request went through, nor anything useful for debugging

Please checkout

cerbosctl audit

https://docs.cerbos.dev/cerbos/latest/cli/cerbosctl.html#audit and let us know if that helps.

Hi, There are couple of configuration parameters and envvars to enable some extra logging.

audit

options

audit:
  enabled: true # Set to false to completely disable audit logging.
  accessLogsEnabled: true # Log API access attempts
  decisionLogsEnabled: true # Log policy decisions

logRequestPayloads

option (could potentially expose sensitive data if used in production);

server:
  logRequestPayloads: true

Setting the

CERBOS_TEST_LOG_LEVEL

to

debug

and

CERBOS_DEBUG_ENGINE

to

true

also could help.

Got it, thank you both!