For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohandoss_27648's avatar
Mohandoss_27648
Icon for Nimbostratus rankNimbostratus
Sep 26, 2016

F5 APM-Session Information

Hi

 

I want to monitor the F5 APM session information like Active session count, Client IP, Session ID, Log on, Start time, Expiration time, Bytes In and Bytes Out from CLI. I just searched the commands but i'm not getting clarity with that. For your reference please find the screenshot that i want to monitor.

 

 

If anyone having the command to view those session information kindly share with me...

 

Thanks in advance...

 

BIG-IP Access Policy Manager (APM)
devops
security

4 Replies

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Sep 26, 2016

    Hi Mohandoss,

    I've to sorry that I've somehow missed your last response in your previous thread...

    https://devcentral.f5.com/questions/apm-manage-session-48945

    ... in the meantime a got access to a TMOS v12.1 plattform and it seems that F5 has heared your voice and included a new TMSH command to dump the information you're aiming for...

    (tmos) show apm access-info 

Display all access-info? (y/n) y
apm::access-info
926d55ee (logon user=kwilke) (client IP=10.10.10.10)

(tmos) show apm access-info all-properties 

Display all access-info? (y/n) y
apm::access-info
 Session                                926d55ee
 -partition                               Common
 -status                             established
 -logon user                              kwilke
 -client IP                          10.10.10.10
 -profile access type                        all
 -access profile                            full
 -start time                 2016-09-26 14:29:37
 -expiration time            2016-09-26 14:44:53
 -bytes:(rx,tx)                     (11259,1908)
 -packets:(rx,tx)                          (0,0)
 -ingress:(raw,compressed)                 (0,0)
 -egress:(raw,compressed)                  (0,0)

    Cheers, Kai

  • rcarlos42_29487's avatar
    rcarlos42_29487
    Icon for Nimbostratus rankNimbostratus
    Jun 27, 2018

    Kai,

     

    Is there a way to auto-answer the tmos prompt for "Display all access-info? (y/n) y" when executing 'show apm access-info'?

     

    Thanks, Rey

     

    • Kai_Wilke's avatar
      Kai_Wilke
      Icon for MVP rankMVP
      Jul 02, 2018

      Hi Rey,

      For TMSH in bash mode you may try the syntax below...

      [root@f501:Active:Standalone] config  echo y | tmsh show apm access-info

      For TMSH in interactive mode you may try the syntax below...

      root@(f501)(cfg-sync Standalone)(Active)(/Common)(tmos) run util bash -c "echo y | tmsh show apm access-info"

      ... or even create a friendly TMSH alias to shortcut the rather complex command...

      root@(f501)(cfg-sync Standalone)(Active)(/Common)(tmos) load sys config merge from-terminal
Enter configuration. Press CTRL-D to submit or CTRL-C to cancel.
cli alias shared apm-access-info {
    command "run /util bash -c 'echo y | tmsh show apm access-info'"
}
Loading configuration...
root@(f501)(cfg-sync Standalone)(Active)(/Common)(tmos) apm-access-info
apm::access-info
Total records returned: 0

      Cheers, Kai