Guarantee Logging - CLI or GUI ?

Hi All ,

 

ASM version - 10.2.4

 

1) Permenantly switching off Gurantee Remote Logging

 

In ASM ->profiles-->loggingProfiles-->Profile name we have an option of Gurantee logging.

 

The help text says the following:

 

"Specifies, when checked (enabled), that the system logs all traffic, even though this may slow your web application. Specifies, when cleared (disabled), that the system logs traffic as long as it does not slow your web application. The default is disabled. In either case, the system does not drop requests."

 

 

There is this CLI command that would permenantly swtich off the guarantee_remote_logging flag.

 

/usr/share/ts/bin/add_del_internal add guarantee_remote_logging 0

 

 

If i want to permenantly swtich off the guarantee remote logging option , do i run the CLI command only or does it also matter that i must have the checkbox in ASM ->Logging profiles-->Profile Name enabled or disabled (if yes ,then should it be enabled or disabled ?) !

 

 

2) Ensuring traffic flows through at all Costs

 

The idea of permenantly swtich off the guarantee remote logging option is to ensure that if the remote server is not available (for some reason) , then no traffic will be dropped. If the objective is to allow traffic at all costs , then is there a better/another way to do it besides switching guarantee remote logging flag?

 

regards

 

Nik