Are TR7 WAF Logs Deleted After a Certain Period of Time? Are the Logs Permanent?
About
Are WAF Logs Persistent?
On TR7 ASP, WAF logs are persistent and always accessible unless a manual action is taken. These logs are stored to ensure critical requests can always be reviewed and accessed when necessary. The logs can be continuously used to detect potential security threats and provide resolutions. In addition, since each log entry contains detailed information, more effective analysis against potential attacks is possible. TR7 ASP uses advanced compression algorithms to ensure logs are periodically checked and consume minimal disk space.
Interface
WAF Logs and Deletion
Step > 1
First, follow the steps "Monitor Mode > Related vService > Logs > WAF Logs". The blocked requests by WAF are displayed on the opened screen.
Step > 2
WAF logs can be viewed by navigating to "Setting Mode > Settings > Device Management > Disk Management > File Management". From this screen, the size of the files stored per month on TR7 can be seen. By clicking the icon on the left side of the desired month, the list of vServices is displayed, and the WAF Logs column shows the disk space used by the logs. You can also review the size of logs stored during the Learning mode for each vService. After selecting WAF Logs for the related vService, the logs can be permanently deleted from the web interface by clicking the "Delete Selected" icon.