All Products
Search
Document Center

Web Application Firewall:Upgrade log storage capacity

Last Updated:Sep 19, 2024

In Web Application Firewall (WAF), after you enable the Simple Log Service for WAF feature, you can upgrade the log storage capacity when the storage usage is about to reach or has reached the upper limit. If you do not upgrade the log storage capacity in a timely manner, your WAF logs may fail to be written to the related Logstore.

Upgrade benefits

You can upgrade log storage capacity to prevent log write failures. You can also upgrade log storage capacity to meet the following long-term requirements:

  • Improve visibility and monitoring capabilities:

    After you upgrade log storage capacity, you can record more requests and events to monitor traffic and identify threats. Security teams can use log details to better understand attack behavior and patterns and conduct more effective countermeasures.

  • Meet compliance requirements:

    Some industries and regulations require enterprises to retain detailed access and security logs to meet compliance requirements. You can upgrade log storage capacity to store all the required logs. This helps prevent potential legal and financial liabilities.

  • Analyze long-term trends:

    Enterprises can analyze long-term trends based on more historical data to identify threats and traffic pattern changes. This helps configure policies and resources in a more effective manner.

Procedure

Important
  • You can view and upgrade log storage capacity only if your WAF instance runs the Pro, Enterprise, or Ultimate edition and uses the subscription billing method. If your WAF instance uses the pay-as-you-go billing method, Simple Log Service generates bills based on your actual usage. No limit is imposed on log storage capacity. Therefore, you do not need to upgrade the capacity.

  • When your log storage usage reaches 80% of the capacity, the system notifies you that the storage usage is approaching the upper limit by text message and email. If log storage capacity is insufficient, your logs cannot be written to the related Logstore, and data is lost. To prevent this issue, we recommend that you upgrade log storage capacity immediately after you receive the system notification.

  1. Log on to the WAF 3.0 console. In the top navigation bar, select the resource group and region of your WAF instance. You can select Chinese Mainland or Outside Chinese Mainland.

  2. In the left-side navigation pane, choose Detection and Response > Log Service.

  3. Manage log storage capacity.

    • View log storage capacity: In the upper-right corner of the Log Service page, view log storage capacity and log storage usage, which is given in percent.

    • Upgrade log storage capacity: In the upper-right corner of the Log Service page, click Upgrade Storage. In the panel that appears, find the Log Storage Capacity parameter, select a larger value, and then complete the payment.

References

If your current log storage capacity exceeds your business requirements and causes additional costs, you can reduce the capacity to reduce costs. For more information, see Upgrade or downgrade a WAF instance.