cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

603
Views
0
Helpful
2
Replies

FMC show events just for one day ago

hello

i have a FTD 4120  and use FMC  for manage it

my problem : FMC just save events logs for last one day ago  and i cant see logs for 3 days ago but

for   ips  events  i dont have any problem and fmc show  me logs for 6 month ago

and fmc disk usage not  is full

---

i dont have any change configuration in  Configuration>Database

it has default value

Intrusion Event Database : 1000000

Connection Database : 1000000

Connection Summary Database  : 1000000

 

 

 

help me , please

 

1 ACCEPTED SOLUTION

Accepted Solutions
Mohammed al Baqari
VIP Advisor

Hi,

You don't have a retention period in FMC. Instead it overrides once DB
thresholds are reached. You can increase the thresholds but it will impact
performance. I suggest to dump logs to remote syslog server for more
reliable event tracking.


**** please remember to rate useful posts

View solution in original post

2 REPLIES 2
Mohammed al Baqari
VIP Advisor

Hi,

You don't have a retention period in FMC. Instead it overrides once DB
thresholds are reached. You can increase the thresholds but it will impact
performance. I suggest to dump logs to remote syslog server for more
reliable event tracking.


**** please remember to rate useful posts

thanks alot sir

Create
Recognize Your Peers
Content for Community-Ad