FMC 4500 Log retention

[DivvNetSec]

Hi,

Does anyone know for howmany days FMC stores log locally ? and if anyone can suggest where to check user (Access logs) logs older than 30 days.

Thanks,

Divyesh

[Francesco Molino]

Hi

To check retention, you can go on fmc configuration and then go on database menu.
Retention is based on number of events.
Here a link showing limits of each FMC models:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/system_configuration.html#concept_C94E9492C76E4CCC9100B3139C7CF771

What do you mean by access logs?
Monitoring what users have done on FMC? If so, when going to FMC wheel on top right, you'll have monitoring/audit