WAF logs

This help contains the following topics:

·     Introduction

·     Restrictions and guidelines

·     Manage WAF logs

¡     Viewing WAF log details

¡     Import logs

¡     Export logs

Introduction

The WAF Log List page displays the logs generated by the WAF module. These logs help administrators customize WAF profiles to control users' website access behaviors.

You can enable logging in a WAF profile. The WAF module can then generates logs for packets that match the WAF profile.

Restrictions and guidelines

·     Only one log operation (import, export, or delete) is allowed at a time.

·     Only one user can perform a log operation at a time. When you import, export, or delete logs, make sure no one else is performing a log operation.

·     When you query logs of a time range, this page displays the logs of the first day by default. You can click Previous Day or Next Day to view the logs of a specific date.

Manage WAF logs

Viewing WAF log details

To view details of a log, click the Details icon  in the Details column. In the WAF Log Details window, the signature name in the WAF information area and the fields in the Packet Details area might be incompletely displayed. To view the complete content, you can use the following methods:

·     Hover over the content.

·     Click Copy. On the window that opens, obtain the complete content.

Import logs

1.     Click the Monitor tab.

2.     In the navigation pane, select Security Logs > WAF Logs.

3.     Click Import.

4.     In the dialog box that opens, click Yes.

5.     Select a log file, and enter the password for the log file. The password was set when the file was exported.

Export logs

1.     Click the Monitor tab.

2.     In the navigation pane, select Security Logs > WAF Logs.

3.     Click Advanced search.

4.     On the page that opens, specify the search criteria to display the logs to be exported.

5.     Click Export.

6.     On the page that opens, configure the log export settings.

Table 1 Log export configuration items

7.     Select one of the following export methods.

¡     Export to one file—Exports logs to one file. When a small number of logs are to be exported, select this method.

¡     Export to files—Exports logs to multiple files. If more than 65000 logs are to be exported, select this method.

8.     Perform one of the following tasks as required:

¡     If you have selected Export to one file, click OK in the dialog box that opens.

¡     If you have selected Export to files, specify the number of logs to be exported to each file and click OK in the dialog box that opens.

When a log export to one file is complete, a dialog box opens, asking you whether to continue exporting the remaining logs to a new file.

-     To continue the export, click Yes.

-     To stop the export process, click No.