Firepower 2110 Logging

[ppitts]

If logging is enabled on a policy within the FIrepower 2110, but not sent to a syslog server, does the logging locally have a size limit?  I am basically wondering if leaving logging on in this way will fill up the drive.

[Marius Gunnerud]

There is of course a limit or the logs would eventually overwhelm the disk space on the Firepower device.  Here is a guide on configuring logging on the FDM.

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/fdm/fptd-fdm-config-guide-640/fptd-fdm-system.html#id_88125

[Marvin Rhoads]

As noted in the document linked by @Marius Gunnerud , "When the buffer fills up, it is overwritten. The default is 4096 bytes. The range is 4096 to 52428800."