This content has been marked as final. Show 2 replies
The firewall has a process called rollaudit that (by default) keeps 20 audit.raw files. It will roll them daily at 2 am.
Check out the 8.3.0 Product guide and search for "rollaudit".
Thanks for the info. I guess I missed that chapter