For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gabriella's avatar
Gabriella
Icon for Altocumulus rankAltocumulus
Nov 25, 2019

ASM - No sample found in requests list

Hi all, I found a lot of entry in Traffic Learning like the one below, but I cannot trace back to the original request, so I cannot analyze it and choose to delete or accept it. Any advice?   ...
ASM Advanced WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jun 19, 2020

Hello Gabriella,

 

Is local logging enabled on your VS?

Do you have "Illegal requests only" or "Log all requests" logging profile on your VS?

It could be suggestions for totally legal requests or for legal requests with staging violations, which weren't logged locally. To make it log locally you need to select appropriate logging profile.

Also, if these requests were deleted (manually or automatic), then you won't see them.

 

About limit of local logging - you can look at https://support.f5.com/csp/article/K37655278: "By default, the local log storage is finite with a maximum capacity of 3 million records stored across all BIG-IP ASM security policies and 2 GB in database table size."

 

Thanks, Ivan