cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

599
Views
5
Helpful
2
Replies
thomas poeckl
Beginner

Firepower connection events - timespan to short

Hello;

 

I have the problem that the timspn is to shot for analysing connection troubles.

What is a working solution to increase the timespan, or to download the connection event history?

many Thanks, Thomas

1 ACCEPTED SOLUTION

Accepted Solutions
Marvin Rhoads
VIP Community Legend

By default FMCv stores 1 million connection events. You can change this settings (subject to the platform limits) under the Configuration > Database menu.

You can alternatively send connection events to an external system like Splunk ($$$) or an ELK stack (free but you have to build it from open source)

View solution in original post

2 REPLIES 2
Marvin Rhoads
VIP Community Legend