Forum Discussion
AFM + custom logging profile with some chosen fields for storage format
Hello, I have AFM running on 12.1. I created my own logging profile and I assigned it to a VIP. The same VIP also has firewall policy assigned (for now it is staged). While creating that logging profile I chose some of the fields for storage formats. Despite that from what I can see in the logs all the fields are logged and not the ones I decided to choose. Why? Where did I make my mistake?
4 Replies
- Tikka_Nagi_1315Historic F5 Account
Without looking at the configuration and logs it is difficult to determine what is wrong. I would recommend that you open a support case and provide a qkview to troubleshoot this.
- kkohegyi_165129
Nimbostratus
Hi Maciej,
I am encountering the same problem.
Did you solve this issue ?
thx,
- Richard_Karon
Employee
what do the following commands show:
tmsh list /ltm virtual tmsh list /security log profile
- Seattle2k
Employee
If you want to use a custom field-list, in your AFM Logging Profile, make sure that your Log Publisher does not point to Splunk (formatted) Log Destination. The Splunk-formatted destination will override the AFM Logging Profile, effectively ignoring the custom field-list or user-defined list.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com