After you enable the Log Service for WAF feature, you can modify log settings, such as the storage period, log fields, and log type, on the Log Settings page. The log types are Full Logs and Block Logs. To better utilize your log storage capacity, we recommend that you modify log settings based on your business protection and analysis requirements and classified protection requirements.
Background information
Log settings take effect for all domain names for which log collection is enabled. For more information about how to enable log collection for a domain name, see Get started with the Simple Log Service for WAF feature.
Prerequisites
The Log Service for WAF feature is enabled. For more information, see Get started with the Simple Log Service for WAF feature.
Procedure
Log on to the WAF console. In the top navigation bar, select the resource group and the region in which the WAF instance is deployed. The region can be Chinese Mainland or Outside Chinese Mainland.
In the left-side navigation pane, choose .
In the upper-right corner of the Log Service page, click Log Settings. Configure the following parameters and click Save.
Parameter
Description
Storage Period
The storage period of logs. Unit: days. Default value: 180. Valid values: 15 to 360.
Custom Field Configuration
The log fields that are supported by WAF and included in logs.
WAF log fields can be categorized into Required Fields and Optional Fields. Required fields must be included in WAF logs and cannot be modified. You can include optional fields in WAF logs based on your business requirements. For more information about WAF log fields, see Log fields supported by WAF.
To include optional fields in WAF logs, select the fields in the Available Fields section of the Optional Fields and click the right arrow to add them to the Selected Fields section.
Log Type
The type of log that you want to store. Valid values:
Full Logs: All logs are stored, including the logs that are generated when WAF allows and blocks requests.
Block Logs: Only the logs that are generated when WAF blocks requests are stored.
Result
After you modify the log settings, the Log Service for WAF feature stores logs based on the settings that you configure.