Can WAF Log Protection Events?

On the WAF console, you can view logs for the last 30 days and download logs for all protected websites for the last five days for free.

If you want to store WAF protection logs for a long time, enable Log Tank Service (LTS) at additional costs and authorize it for WAF logging. Logs can be stored in LTS for seven days by default but you can configure LTS for up to 30 days if needed. Logs earlier than 30 days are automatically deleted. However, you can configure LTS to dump those logs to an Object Storage Service (OBS) bucket or enable Data Ingestion Service (DIS) for long-term storage.

For details about how to configure LTS for WAF, see Enabling LTS for WAF Logging.