cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2671
Views
0
Helpful
1
Replies

FMC 4500 Log retention

DivvNetSec
Beginner
Beginner

Hi,

 

Does anyone know for howmany days FMC stores log locally ? and if anyone can suggest where to check user (Access logs) logs older than 30 days.

 

 

 

Thanks,

Divyesh

1 Reply 1

Francesco Molino
VIP Mentor VIP Mentor
VIP Mentor
Hi

To check retention, you can go on fmc configuration and then go on database menu.
Retention is based on number of events.
Here a link showing limits of each FMC models:
https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/system_configuration.html#concept_C94E9492C76E4CCC9100B3139C7CF771

What do you mean by access logs?
Monitoring what users have done on FMC? If so, when going to FMC wheel on top right, you'll have monitoring/audit

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: