Web Application Firewall (WAF) provides a flexible log settings feature that lets you create custom configurations. You can configure log fields for all protected objects at once or for individual protected objects. You can also customize parameters, such as log capacity and storage duration, to meet your business needs.
Log settings features
Feature Category | Description |
Manage log delivery status | Enable log delivery to send WAF logs to the Simple Log Service (SLS) platform. This lets you centrally manage and monitor the security of your web applications in real time, respond to security events more efficiently, and use data analytics to discover potential security threats. |
Upgrade log capacity | After you enable the log service for WAF, upgrade the log capacity promptly if it is nearly full or has reached its limit. This action prevents WAF logs from failing to be written to the Logstore. |
Set the log storage duration | After you enable the log service for WAF, modify the log storage duration based on your protection and analysis needs to use your log capacity more effectively. The default storage duration is 180 days. |
Set delivered log fields | After you enable the log service for WAF, use the default configuration for delivered log fields or create custom configurations for specific protected objects. This provides flexible and centralized management to meet your business requirements for mitigation logs. |