Connection events and storage size

[SupportAC]

Hi,

We have configured 2 Firepower 8350 (v5.4.0.7) with the same health policy, system policy, etc. In one of these if we go to "Connections events" we can se the events recevided, but not in the another one (its empty)

On the another hand, we would like to increase the database size for logs in Virtual defense center, where can increase the events stored in firepower too?? /var/log is empty but it seems like FPower can assume more events.

Regards,

[JG1978]

Thanks, those are some good suggestions and I am working towards trimming down as much as possible.

[Syed Nabeel Ahmad]

Dear,

how to remove all previous connection events for reducing database size. 

[Ahmed Muneer]

Hi Marvin , 

to increase the logging as per the guide can be done  System > Configuration  then Database

But that option is not Exist on (CDO ) Cloud Delivery Orchestrator.

any help 

[Marvin Rhoads]

@Ahmed Muneer Logging is a separate subscription in CDO (Cisco Defense Orchestrator). It's known there as Secure Analytics and Logging (SAL) and is available in several tiers and options - all of which require an additional license.

https://docs.defenseorchestrator.com/#!r-about-secure-logging-analytics-saas.html?highlight=security%20analytics%20and%20logging

If you don't have it licensed, then CDO won't show you connection or event logs. You do have the option of setting up an on-prem FMC (or SNA data store) just for logging while continuing to use the cdFMC in CDO for management.