Audit logs to splunk

Question

Hi,How to configure to send audit logs to splunk?Thanks!

mihaic · Answer

Here are some articles :&nbsp;https://support.f5.com/csp/article/K13080?sr=42612466&nbsp;https://support.f5.com/csp/article/K15316506https://docs.splunk.com/Documentation/AddOns/released/F5BIGIP/ConfigureUDPinputshttps://www.pwndefend.com/2020/07/07/configuring-syslog-integration-with-f5-big-ip/&nbsp;

rams_01 · Answer

Thanks for the informtion,We already had setup splunk remote servers in F5.&nbsp;&nbsp;I'm looking how to configure in F5 to just send the audit logs to splunk.Thanks!

mihaic · Answer

maybe this is what you are looking for:https://support.f5.com/csp/article/K56602501&nbsp;

omar2 · Answer

Hello rams_01https://support.f5.com/csp/article/K56602501The above link is to send only audit logs to a remote log servermake sure for the connectivity between F5 and the log server

Forum Discussion

Audit logs to splunk

Recent Discussions

Help me understand Load Balancing

Vertica DB Monitoring Failure post upgrade 10.x to 23.x

URL redirect

Help configuring NAT64 on a BIG-IP LTM

anti-bot ip exclude

Related Content

Auditing Security Policy Updates

Logging/Audit Binary Execution?

BIGIP ASM audit logging

Setting up F5 Telemetry Streaming with Splunk Cloud

Audit WAF changes