For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Priyesh_MP's avatar
Priyesh_MP
Icon for Nimbostratus rankNimbostratus
Jan 16, 2020

F5 ASM Report retention period

Dear Team,   Good day!   May I know where will ASM store all the reports related data? How many days reports ASM will store locally?   Thank you.   Best Regards, Priyesh MP
ASM Advanced WAF
BIG-IP
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jan 21, 2020

Hello Priesh,

 

  1. For how long traffic pass through ASM on your system?
  2. Did you upgrade your system? Statistics can be deleted in case of upgrade.
  3. Did you check different time periods (last week, last month, last year, custom)? Sometimes you don't see statistics for e.g. last two weeks in case of custom period, but you can see it in case of last month period and vice versa - it depends on when exactly we start to gather statistics, this is how aggregation mechanism works.

 

In general, we should store all statistics from day one and we don't have any limitation for reporting, like we do have in case of Event Log. We should have ability to store all statistics for several years without any problem, until it will be manually deleted or until upgrade will be executed.

 

Thanks, Ivan

Priyesh_MP's avatar
Priyesh_MP
Icon for Nimbostratus rankNimbostratus
Jan 23, 2020

Dear Ivan,

 

Good day to you!

 

Please find my answers below.

 

  1. For how long traffic pass through ASM on your system? --> Since 30th November 2019
  2. Did you upgrade your system? Statistics can be deleted in case of upgrade. --> No upgrade. We have restarted the ASM 1 or 2 times
  3. Did you check different time periods (last week, last month, last year, custom)? Sometimes you don't see statistics for e.g. last two weeks in case of custom period, but you can see it in case of last month period and vice versa - it depends on when exactly we start to gather statistics, this is how aggregation mechanism works. --> Yes I have checked with Last Year as well. It's showing reports from 22nd December 2019 only not from day one

 

Is there any document available, where it is saying that there is no limitation for storing reports?

 

Thank you.

 

Best Regards,

Priyesh MP