For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Oct 20, 2013

ASM Signature Download logs to Remote SIEM server.

Hello Folks,   Could you please help me with a specific scenario to send ASM logs to external SIEM logging?   Scenario: In case ASM fails to download auto-signature database from F5's update se...
siem
signature download logging to external siem
rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Oct 21, 2013

An issue like that will end up being logged to /var/log/asm, via normal syslog processes. The instruction for forwarding syslog's output to a remote server is in solution 13080:

 

http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13080.html

 

Be aware that there can be quite a bit of traffic generated when you forward all of the syslog output and you may need to filter syslog messages.