diff --git a/CHANGES b/CHANGES
index 04dad823..dc332422 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,9 @@
 02 Jun 2008 - trunk
 -------------------
 
+* Fixed an issue where an alert was not logged in the error log
+  unless "auditlog" was used.
+
 * Enable the "auditlog" action by default to help prevent a misconfiguration.
   The new default is now: "phase:2,log,auditlog,pass"
 
diff --git a/apache2/re.c b/apache2/re.c
index 371fc579..243f1451 100644
--- a/apache2/re.c
+++ b/apache2/re.c
@@ -1629,9 +1629,18 @@ static void msre_perform_disruptive_actions(modsec_rec *msr, msre_rule *rule,
         || (msr->modsecurity->processing_mode == MODSEC_OFFLINE)
         || (actionset->intercept_action == ACTION_NONE))
     {
-        /* If "no(audit)?log" was used log at a higher level. */
-        msc_alert(msr, ((actionset->log == 0) || (actionset->auditlog == 0) ? 4 : 2), actionset,
-            "Warning.", message);
+        /* If "nolog" was used log at a higher level to prevent an "alert". */
+        int log_level = (actionset->log == 0 ? 4 : 2);
+        msc_alert(msr, log_level, actionset, "Warning.", message);
+
+        /* However, this will mark the txn relevant again if it is <=3,
+         * which will mess up noauditlog.  We need to compensate for this
+         * so that we do not increment twice when auditlog is enabled and
+         * prevent incrementing when auditlog is disabled.
+         */
+        if (log_level <= 3) {
+            msr->is_relevant--;
+        }
         return;
     }