Forum Discussion

bsb's avatar
bsb
Icon for Nimbostratus rankNimbostratus
Mar 08, 2018

ASM logs to SIEM

currently f5 system logs are forwarded to mcafee siem, now ASM profiles are enabled and how to identify if the asm logs are also forwarded to siem. any tcpdump to identify asm logs being forwarded. ...
ASM Advanced WAF
security
Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Mar 08, 2018

You can use tcpdump to see if syslog messages are forwarding but you wont be able to read the contents unless open it in tools like wireshark and do a packet inspection.

 

I would suggest to look at it in the syslog server if you are receiving the ASM logs with a tag 'ASM' at the start.

 

-Jinshu