How Do I Obtain Data about Block Actions?

WAF allows you to download the attack events (log-only and block events) data of all protected domain names over the past five days. A CSV file of the protection event data for the current day will be generated at the beginning of the next day.

On the Dashboard page, you can view the protection event logs by website or instance. You can select a specific time range, including yesterday, today, past 3 days, past 7 days, or past 30 days. You can also specify a time range no longer than 30 days. On this page, protection event logs are displayed by different dimensions, including the number of requests and attack types, QPS, bandwidth, response code, event distribution, top 5 attacked domain names, top 5 attack source IP addresses, top 5 attacked URLs, top 5 attack source locations, and top 5 error pages.

For details about how to obtain event data, see Downloading Events Data.