Forum Discussion

Utkc137's avatar
Utkc137
Icon for Nimbostratus rankNimbostratus
Dec 20, 2023

Big IP Security Logging Profiles logs captured

Does Logging Profile created for Application Security also capture Application Audit Logs? 
I am trying to capture audit changes made on Big IP Console.

For example, creating a new allowed HTTP URL:
Security  ››  Application Security : URLs : Allowed URLs : Allowed HTTP URLs  ››  New Allowed HTTP URL...

Audit Logging
devops
security
  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Dec 20, 2023

    Hi Utkc137,

    you can find them in /var/log/asm. They should look similar to this:

    Dec 20 11:16:00 awaf17.mydomain.com info perl[13577]: 01310053:6: ASMConfig change: Blocking Policy Setting Modified domain cookie(s) [update]: Enable Learn. Enable Alarm. Enable Block. { audit: policy = /Common/juiceshop, username = admin, client IP = 192.168.100.1 }

    Is this what you were looking for?

    KR
    Daniel