Forum Discussion
amolari
Jun 25, 2015Cirrus
As per v11.6, the information from the manualis:
Important: ArcSight formatting is only available for logs coming from Advanced Firewall Manager
(AFM), Application Security Manager™ (ASM), and the Secure Web Gateway component of Access
Policy Manager® (APM®). IPFIX is not available for Secure Web Gateway. Remote Syslog formatting
is the only type supported for logs coming from APM. The Splunk format is a predefined format of key
value pairs.
At the moment it's not possible. I suggest you to open a case by F5 support. Maybe a RFE is existing and you can link your case to it or alternatively create a RFE.