Forum Discussion

Tarik_B_'s avatar
Tarik_B_
Icon for Nimbostratus rankNimbostratus
Apr 05, 2017

ASM seems to log partially the requests

I hesitate to open a case by F5 for the point below.

 

I'm working on version 11.5.3 and I have a remote logging configured on my logging profile, since a few years, that send all requests to a syslog server. The problem is that recently I had to investigate for an issue and for a specific source IP, I found only one request on the WAF when on the next component (Webseal) I have 25 requests!!! For me it is clearly an issue but maybe there is something to do or to try before open a case... I don't know where to dig because all seems to be well configured.

 

Thanks in advance for your help.

 

Regards,

 

ASM Advanced WAF
security
  • Amine_Kadimi's avatar
    Amine_Kadimi
    Icon for MVP rankMVP
    Apr 05, 2017

    As a first suggestion, check if the ASM reached the maximum number of local log entries which is 3 millions entries. If so, you will certainly face the described behavior.