Forum Discussion
How to generate ASM report from a pre-defined filter using TMSH
Is there a way to generate a report using a pre-defined report (filter) using CLI (TMSH)?
Though I should be able to generate the same report by typing down the filter for the report in TMSH but TMSH does not understand the Drilldown for Security Policy for some reason. For instanace, when I try to run the following command it is not able to identify the Policy
save analytics application-security report view-by attack-type measures { occurrences } drilldown {{ entity policy values { My_Security_Policy_Name } } } format pdf file foo.pdf range now-3w
The error I get for above is :
Data Input Error: Invalid entity value My_Security_Policy_Name
This is strange because I am able to see and set Security Policies in the filter in GUI. I am using Big-IP 12.1.0.
- Smith787
Nimbostratus
Starting with Version 5 ElasticSearch charges money for this functionality. It's called "Audit log" and is now part of X-Pack. There is a basic license available that is free, but this license only gives you a simplistic monitoring functionality. Authentication, query logging and all these rather basic things cost money now.
- Patrick_Zoller
Employee
Hi Smith787, thanks a lot for your comment and feedback.
Need to check but as far as I remember I was using Version 7.11 if Elasticsearch with basic license to build those Visualizations as well as the Dashboards. All related Log information will be sent by the BIG-IP via HSL to a SyslogNG instance. I may will record a Video or write a second article on how I made the solution working. Again, thanks a lot for your feedback.