Forum Discussion

Shaheryar's avatar
Shaheryar
Icon for Nimbostratus rankNimbostratus
Jan 05, 2019

ASM Custom Report

Hi All,

 

We need to get ASM report with below mentioned parameters:

 

S.No | Date & time | Attack Source IP address | Destination IP address | Port | Attack Type | Attack Name | Action | Severity | URL | Application | Count

 

Is there a way to get this report?

 

ASM Advanced WAF
BIG-IP
security
  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Jan 07, 2019

    For any custom ASM reporting requirements the best thing to do is to send the ASM logs to an external SIEM system such as Splunk using a Logging Profile. In Splunk you can create any report you want.

     

    Alternatively you can experiment with F5 ASM's built-in reporting which is not particularly flexible, but still does the job for most cases (go to Security -> Reporting -> Scheduled Reports )