For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

stboiss's avatar
stboiss
Icon for Nimbostratus rankNimbostratus
May 23, 2019

Counters Event Logs incoherent

I have an ASM policy with 600 requests blocked in the event logs for a given duration, but in reports, counters blocked for the same duration indicate only 200 requests.

 

Do you have any ideas explaining this difference?

 

thank's in advance

application delivery
ASM Advanced WAF

2 Replies

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    May 27, 2019

    Hi,

     

    I just did a test: check violation number in event log for 1 day then generate a report for 1 day and I have exactly the same number.

     

    Are you sure that your generate a report following this specification:

     

    Advanced filter: empty

    Device group: *Self

    View by : Violations

    Time period: Last Day.

     

    regards

    • stboiss's avatar
      stboiss
      Icon for Nimbostratus rankNimbostratus
      May 27, 2019

      Hi,

      I check request types on last Hour,

      on report i have 45 alarmed and 4 blocked and on event Logs, i have 77 alarmed and 9 blocked

       

      My AVR module is provisioning on Minimum

       

      regards,