After you enable Log Service for WAF, you are allocated log storage space based on the capacity you specified. If your log storage fills up, WAF stops writing logs to the dedicated Logstore — use this topic to monitor usage, expand capacity before it runs out, or clear log data when needed.
Prerequisites
Before you begin, ensure that you have:
Log Service for WAF enabled. For more information, see Enable Log Service for WAF
View log storage usage
Log on to the WAF console. In the top navigation bar, select the resource group and the region where your WAF instance is deployed. The region can be Chinese Mainland or Outside Chinese Mainland.
In the left-side navigation pane, choose Detection and Response > Log Service.
In the upper corner of the Log Service page, view your current log storage usage.
Usage statistics are delayed by two hours. Expand your log storage capacity before it is exhausted rather than waiting for the usage indicator to reach 100%.
Upgrade log storage capacity
If log storage capacity is exhausted, WAF stops writing logs to the dedicated Logstore. Upgrade before capacity runs out to avoid gaps in your log data.
Log on to the WAF console. In the top navigation bar, select the resource group and the region where your WAF instance is deployed.
In the left-side navigation pane, choose Detection and Response > Log Service.
In the upper-right corner of the Log Service page, click Upgrade Storage.
On the page that appears, select a larger storage capacity and complete the payment.
For information about available capacity options and pricing, see Overview of the Log Service for WAF feature.
Clear log storage space
Clearing log data frees up storage space immediately. Use this option only when you cannot upgrade capacity or need to reset your logs.
Cleared log data cannot be restored. After Log Service for WAF is activated, you can clear log storage a total of four times.
Log on to the WAF console. In the top navigation bar, select the resource group and the region where your WAF instance is deployed.
In the left-side navigation pane, choose Detection and Response > Log Service.
In the upper-right corner of the Log Service page, click Clear.
In the confirmation dialog box, click OK.
All log data in your dedicated Logstore is permanently deleted.
What's next
To analyze and query your WAF logs, go to Detection and Response > Log Service in the WAF console.
To learn about log storage capacity options, see Overview of the Log Service for WAF feature.