Logs storage capacity

[Vishal6]

Hi All,

I have CDO manage fmc and SAL license to store logs on Cisco Cloud Events with retention period of 90days, however im facing an issue of over utilisation of logs storage with respect to storage allocated. Can someone guide me how to mitigate this. Can i store logs only for a 1hour and post it will delete or something like that.

Any help will be highly appreciated

[Marvin Rhoads]

You can look at your access control policy rules and see which ones you really need to log. We typically see this level of overutilization when you have sett ALL rules to log connection events including your "catch all" outbound traffic allow rule. In many deployments, that covers 90% or more of the hits to your access control policy rules (and associated connection events).