Forum Discussion

rechiecebreros's avatar
rechiecebreros
Icon for Nimbostratus rankNimbostratus
Sep 09, 2023

Big IQ and ELK intergration

Hi, Is there a way to intergrate Big-IQ with ELK? The scenario is instead of big-ip sending to ELK, is it possible that Big IQ the one to send data to ELK? Thank you.

application delivery
    • rechiecebreros's avatar
      rechiecebreros
      Icon for Nimbostratus rankNimbostratus
      Sep 11, 2023

      hi Sebastian, we have a lot of F5 devices, so basically the idea is instead of each bigip sending telemetry to elk, we want all to communicate to bigIQ using AVR which is already happening right now. Then bigIQ will be the one to send those analytics/statistics to ELK. An example is cpu, memory, vs and pool events, concurrent connections etc... is this something doable? thank you

      • Sebastiansierra's avatar
        Sebastiansierra
        Icon for MVP rankMVP
        Sep 11, 2023

        Hi,

        The problem or maybe the limitation is that Big-IQ uses its own database to process the Big-IP metrics, It has an internal elk in the DCD to process and show all the information in the CM, so exporting these files to your elk to process the information could be something complex and expecting that after export the info it could be encrypted or not.

        It could be more efficient if you integrate Big-IP with the elk too, please look at this official guide:

        https://docs.elastic.co/integrations/f5_bigip
        Hope it works.