I am using F5 ASM 12.1. The logs which we see on console (Security-->Event Logs-->Applications-->Requests). Where are these logs located on server (file path) and the log rotation policy for these logs.

refer below link , hope this help https://devcentral.f5.com/articles/the-big-ip-application-security-manager-part-10-event-logging you can check current log setting by below command (tmos) list sys log-rotate max-file-size (tmos) list sys db logrotate.logage

sagar, ASM request logs are, from 11.6.0, no longer stored locally (/var/log/asm). See the following article: K16053: BIG-IP ASM does not log security events locally by default in 11.6.0 You have to explicitly enable this. Hope this helps, N

Forum Discussion

sagar_umalkar_2

Nimbostratus

Feb 06, 2017

F5 ASM 12.1 Event Logs Path on Server

I am using F5 ASM 12.1. The logs which we see on console (Security-->Event Logs-->Applications-->Requests). Where are these logs located on server (file path) and the log rotation policy for these logs.

ASM Advanced WAF

devops

2 Replies

Snl
Cirrostratus
Feb 06, 2017
refer below link , hope this help

https://devcentral.f5.com/articles/the-big-ip-application-security-manager-part-10-event-logging

you can check current log setting by below command

(tmos) list sys log-rotate max-file-size

(tmos) list sys db logrotate.logage
nathe
Cirrocumulus
Feb 07, 2017
sagar, ASM request logs are, from 11.6.0, no longer stored locally (/var/log/asm). See the following article: K16053: BIG-IP ASM does not log security events locally by default in 11.6.0

You have to explicitly enable this.

Hope this helps,

N