Each subscription-based WAF instance has a fixed log storage capacity for access and security logs. When usage approaches or reaches that limit, upgrade the capacity to prevent log write failures and data loss.
When log storage capacity is full, WAF stops writing new logs to the Logstore and any subsequent logs are lost. The system sends a text message and email notification when usage reaches 80%. Upgrade storage immediately after receiving this notification.
Prerequisites
Before you begin, ensure that you have:
-
A WAF instance on the Pro, Enterprise, or Ultimate edition using the subscription billing method
Pay-as-you-go WAF instances use Simple Log Service with no fixed storage limit. Billing is based on actual usage, so no capacity upgrade is needed.
Upgrade benefits
Beyond preventing log write failures, upgrading storage capacity supports the following long-term needs:
-
Improve visibility and monitoring capabilities: Greater storage capacity allows WAF to record more requests and events, helping security teams monitor traffic, identify threats, and analyze attack patterns.
-
Meet compliance requirements: Certain industries and regulations require detailed access and security log retention. Upgrading storage capacity ensures all required logs are kept, reducing compliance risk.
-
Analyze long-term trends: More historical data helps identify evolving threats and traffic patterns, enabling better-informed security policies and resource planning.
Upgrade log storage capacity
-
Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of your WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.
-
In the left-side navigation pane, choose Detection and Response > Log Service.
-
In the upper-right corner of the Log Service page, view the current log storage capacity and storage usage percentage.
-
Click Upgrade Storage. In the panel that appears, find the Log Storage Capacity parameter, select a larger value, and complete the payment.
What's next
If your log storage capacity exceeds your needs, you can downgrade it to reduce costs. For more information, see Upgrade or downgrade a WAF instance.