OCI - sending waf logs to Log Analytics
Hi Team,
Which of them is recommend, Filter OCI WAF Logs Before Sending to Log Analytics or sending all waf logs to Log Analytics?
For option 1:
Filtering requirements:
- Forward only blocked requests.
- Forward only requests where the WAF Protection Capability Rule Name is
Top 10. - Avoid forwarding unnecessary WAF log records to Log Analytics.
Can we add both 1 and 2 in single log filter task? and what is the add log option?
Thanks,
SGU
Tagged:
0