If logging is enabled on a policy within the FIrepower 2110, but not sent to a syslog server, does the logging locally have a size limit? I am basically wondering if leaving logging on in this way will fill up the drive.
There is of course a limit or the logs would eventually overwhelm the disk space on the Firepower device. Here is a guide on configuring logging on the FDM.
As noted in the document linked by @Marius Gunnerud , "When the buffer fills up, it is overwritten. The default is 4096 bytes. The range is 4096 to 52428800."
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
