Forum Discussion
Nfordhk_66801
Nimbostratus
NimbostratusAFM Logging without a Virtual Server Profile
Hi,
I am trying to view the logging for rules configured on our network firewall. All F5 documentation I have found ultimately points applying a profile to a VIP. We are using this as a layer 4 ...
Nfordhk_66801Nimbostratus
NimbostratusHi Chris,
I have seen the global-network profile. But I do not understand how to modify the destination. Is there a supporting document for me to review?
Chris_GrantEmployee
I would start here: https://support.f5.com/kb/en-us/solutions/public/15000/300/sol15368/ Ultimately you will end up on the AFM implementation guide, but that is specific to your version. There are links to help you get there at the bottom or the above link. You will need to decide if you want to log locally or remotely. If you decide to log remotely be aware that you will need to send the traffic over a tmm interface rather than the management interface.- Nfordhk_66801This is really the step I can't seem to find. I've been searching for this for a while. "Ensure that each individual rule has its Logging setting set to Enabled." But I will not be attaching global to a virtual server. The global rules I have are for nodes. When I setup the global profile, and its logging it is not outputting any info on my global rules. They all say disabled. I feel like I've read quite a few F5 articles with no mention of it.
- Nfordhk_66801There's this article, which shows global rules enabled for logging. But this is another scenario of applying to a VIP. https://devcentral.f5.com/questions/logs-afm
- Nfordhk_66801I'm embarrassed simply clicking on the rule you can enable/disable logging.
