cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1555
Views
0
Helpful
2
Replies

FMC show events just for one day ago

hello

i have a FTD 4120  and use FMC  for manage it

my problem : FMC just save events logs for last one day ago  and i cant see logs for 3 days ago but

for   ips  events  i dont have any problem and fmc show  me logs for 6 month ago

and fmc disk usage not  is full

---

i dont have any change configuration in  Configuration>Database

it has default value

Intrusion Event Database : 1000000

Connection Database : 1000000

Connection Summary Database  : 1000000

 

 

 

help me , please

 

1 Accepted Solution

Accepted Solutions

Hi,

You don't have a retention period in FMC. Instead it overrides once DB
thresholds are reached. You can increase the thresholds but it will impact
performance. I suggest to dump logs to remote syslog server for more
reliable event tracking.


**** please remember to rate useful posts

View solution in original post

2 Replies 2

Hi,

You don't have a retention period in FMC. Instead it overrides once DB
thresholds are reached. You can increase the thresholds but it will impact
performance. I suggest to dump logs to remote syslog server for more
reliable event tracking.


**** please remember to rate useful posts

thanks alot sir

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: