Imagine you have a site API that accepts data in the form of GET requests with parameters, or as POST requests (say, with standard url-encoded, &-separated POST data).
You can install mod_security and put in /etc/modsecurity/modsecurity.conf:
mod_security
/etc/modsecurity/modsecurity.conf
SecRuleEngine On SecAuditEngine On SecAuditLog /var/log/apache2/modsec_audit.log SecRequestBodyAccess on SecAuditLogParts ABIJDFHZ