Forum Discussion

George_33482's avatar
George_33482
Icon for Nimbostratus rankNimbostratus
Dec 11, 2014

ASM logging profile response logging

Hello, I have an ASM that is enabled with a logging profile with local and remote logging. Everything is enabled on that logging profile, and the HTTP REQUEST is being send and seen in the syslog ser...
ASM Advanced WAF
cisco
deployment
security
George_33482's avatar
George_33482
Icon for Nimbostratus rankNimbostratus
Dec 11, 2014

yes the ASM is sending syslog messages to the syslog. As stated previously that I am receiving "HTTP Request" in the syslog but NOT the "HTTP Response". The storage type is set to All request.

 

Just to illustrate more: 1- logging profile enabled locally and remotely and all requests as a storage type. 2- Locally, I can see the HTTP Requests and the HTTP Requests. 3- Remotely on syslog, I can only see the HTTP Request and NOT the HTTP Responses***.... (sorry typing mistake in the previous post)

 

gsharri's avatar
gsharri
Icon for Altostratus rankAltostratus
Dec 11, 2014
I can confirm in v11.5.0 on my ASM that I do see request/response logs on my remote syslog server. I am using TCP to allow for larger size messages. I would run tcpdump on ASM to capture the syslog messages and confirm whether or not they contain requests and responses or requests only. If it is only requests then we know the issue is with ASM/logging profiles.