Fortinet black logo

Handbook

Configuring Attack Log purge settings

Copy Link
Copy Doc ID 7b437c33-fcc7-11ec-bb32-fa163e15d75b:165287
Download PDF

Configuring Attack Log purge settings

Attack Log purging is the deleting of logs to preserve log space and maintain log system performance.

By default, DDoS Attack Logs are purged on a first-in, first-out basis when the log reaches 1,000,000 entries. Attack Log purge settings are configurable. You can specify a different threshold, and you can purge logs manually.

Before you begin:

  • You must have Read-Write permission for Log & Report settings.
To configure purge settings:
  1. Go to Log & Report > Log Configuration > Log Purge Settings.
  2. Complete the configuration as described in the table below.
  3. Save the configuration.

Attack Log purge settings configuration guidelines

Settings Guidelines
Automatic Purge Select to automatically purge Attack Logs after the max number of entries is reached.
Purge older events when the number of events is over Purge the earliest Attack Logs when this threshold is reached. The default is 1,000,000 entries.
Manual Purge Select to purge entries logged during the specified period.
Start Date / End Date Specify a period when purging logs manually. The period begins at 0:00 on the start date and ends at 23:59 on the end date.

To configure with CLI:

config ddos global attack-event-purge

set purge-watermark 2000000

end

Configuring Attack Log purge settings

Attack Log purging is the deleting of logs to preserve log space and maintain log system performance.

By default, DDoS Attack Logs are purged on a first-in, first-out basis when the log reaches 1,000,000 entries. Attack Log purge settings are configurable. You can specify a different threshold, and you can purge logs manually.

Before you begin:

  • You must have Read-Write permission for Log & Report settings.
To configure purge settings:
  1. Go to Log & Report > Log Configuration > Log Purge Settings.
  2. Complete the configuration as described in the table below.
  3. Save the configuration.

Attack Log purge settings configuration guidelines

Settings Guidelines
Automatic Purge Select to automatically purge Attack Logs after the max number of entries is reached.
Purge older events when the number of events is over Purge the earliest Attack Logs when this threshold is reached. The default is 1,000,000 entries.
Manual Purge Select to purge entries logged during the specified period.
Start Date / End Date Specify a period when purging logs manually. The period begins at 0:00 on the start date and ends at 23:59 on the end date.

To configure with CLI:

config ddos global attack-event-purge

set purge-watermark 2000000

end