Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Mar 16, 2016

ASM Chart scheduler simplfication.

Hello Folks,   Need some help on ASM Chart scheduler. The requirement is to get every IP logged by ASM violations in the email chart. Idea is to get exact information we see under Security > Event...
ASM Advanced WAF
charts
security
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Mar 23, 2016

As I understand it, the chart only shows aggregate figures because that is how it is designed.

 

If you want detailed figures then you need to send logging to your own log servers and perform detailed reporting there. This can be done by configuring log filtering to Arcsight/Splunk/Syslog compatible log servers. Once they have the information stored in their DB you should be able to interrogate that to produce your own customised reports with the detail you require.

 

  • Muhammed_Saeed1's avatar
    Muhammed_Saeed1
    Icon for Nimbostratus rankNimbostratus
    Mar 23, 2016
    Hi Kevin, Thank you for your reply, do you have an official document/link to support your statement "because that is how it is designed'? I need this for my client.
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Icon for Nacreous rankNacreous
    Mar 24, 2016
    No. I do not. It is from my observations of how the graphs work. If you are not getting 1:1 relationship from the graph to the request logs then its pretty clear there is a level of aggregation occuring here. If you ask F5 support for more detail they will have better information on how the graphs are produced.