Forum Discussion

Jim_106191's avatar
Jim_106191
Icon for Nimbostratus rankNimbostratus
Apr 02, 2019

ASM event log history

My 13.1 BigIP LTM ASM seems to only keep a couple of days of entries in its application event log. Am i able to increase that to 30 days of history? This would be for illegal requests ideally.

 

ASM Advanced WAF
logging
security
  • suttonsc's avatar
    suttonsc
    Icon for Employee rankEmployee
    Apr 04, 2019

    There are limits built into the BIG-IP to prevent consuming all available space. If the device is only retaining a couple days, increasing to 30 days could cause the device to become unstable. The best method is to send the logs to an external logging device.