FMC show events just for one day ago

[hamidreza.taghipur]

hello

i have a FTD 4120  and use FMC  for manage it

my problem : FMC just save events logs for last one day ago  and i cant see logs for 3 days ago but

for   ips  events  i dont have any problem and fmc show  me logs for 6 month ago

and fmc disk usage not  is full

---

i dont have any change configuration in  Configuration>Database

it has default value

Intrusion Event Database : 1000000

Connection Database : 1000000

Connection Summary Database  : 1000000

help me , please

[Mohammed al Baqari · Accepted solution]

Hi,

You don't have a retention period in FMC. Instead it overrides once DB
thresholds are reached. You can increase the thresholds but it will impact
performance. I suggest to dump logs to remote syslog server for more
reliable event tracking.


**** please remember to rate useful posts

[hamidreza.taghipur]

thanks alot sir