Forum Discussion

Jim_106191's avatar
Jim_106191
Icon for Nimbostratus rankNimbostratus
Apr 02, 2019

ASM event log history

My 13.1 BigIP LTM ASM seems to only keep a couple of days of entries in its application event log. Am i able to increase that to 30 days of history? This would be for illegal requests ideally.  
ASM Advanced WAF
logging
security
suttonsc's avatar
suttonsc
Icon for Employee rankEmployee
Apr 04, 2019

There are limits built into the BIG-IP to prevent consuming all available space. If the device is only retaining a couple days, increasing to 30 days could cause the device to become unstable. The best method is to send the logs to an external logging device.