Forum Discussion
swo0sh_gt_13163
Altostratus
AltostratusASM Signature Download logs to Remote SIEM server.
Hello Folks,
Could you please help me with a specific scenario to send ASM logs to external SIEM logging?
Scenario:
In case ASM fails to download auto-signature database from F5's update se...
rob_carr
Cirrostratus
CirrostratusAn issue like that will end up being logged to /var/log/asm, via normal syslog processes. The instruction for forwarding syslog's output to a remote server is in solution 13080:
http://support.f5.com/kb/en-us/solutions/public/13000/000/sol13080.html
Be aware that there can be quite a bit of traffic generated when you forward all of the syslog output and you may need to filter syslog messages.