Understand WAF metrics

You can continuously monitor your applications through Azion Observe products.

View as Markdown

Once you create an firewall and activate the Web Application Firewall (WAF) module, you can also use Observe products to monitor how WAF is processing requests made to your applications.

  • Real-Time Metrics: access to charts with aggregated data to explore behaviors throughout longer periods of data storage.
  • GraphQL API: access to aggragated and raw data via API with customized queries with only the data you request.
  • Real-Time Events: access to logs with raw data to perform extensive analysis.

WAF

To monitor how WAF processes requests and threats:

view aggregated metrics

query data

view raw data

The Set WAF [Your WAF] Firewall behavior performs special processing, allowing other rules to be processed simultaneously. As a result, logs may display other rules in the traceback field, even if the WAF Rule Set is configured to block and return the request. However, the WAF rules operate correctly, blocking requests that match the specified criteria. This behavior is standard for the platform.