This section describes how to view event logs in a specified time (for example, today), including attack and request statistics, the number of attacks from the top 5 source IP addresses, and event distribution.
Login credentials have been obtained.
Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
Choose Security > Web Application Firewall to go to the Dashboard page.
In the domain name drop-down list, select a domain name to view its event logs. The query time can be Yesterday, Today, Past 3 days, Past 7 days, and Past 30 days. Figure 1 shows an example.
You can select All domain names or a specific domain name from the drop-down list.
Total number of requests to the specified domain name
If All domain names is selected, the total number of requests to all domain names is displayed.
Maximum number of requests to the specified domain name per second
Number of attacks on the specified domain name
Number of sources that attack the specified domain name
Trend of attacks
The trend of attacks is displayed by default.
Trend of requests
Click Requests to view the trend of requests.
Types of attack events
Click any colored area in the event distribution circle under Event Distribution to view the type, number, and proportion of an attack.
To stop displaying information about a specific type of event, click the corresponding legend with the same color to the right of the circle.
Top 5 Source IP Addresses (Attacks)
Top 5 attack source IP addresses and their cumulative number of attacks