I've enabled the default request filters with the log directive set to 9.
After I've tried requesting a url like mydomain.com/?test=phpsessid the XSS request filter protects the page but it doesn't get logged to the error.log.
Is there something else I've to enable?