F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

The_Engima_Code's avatar
The_Engima_Code
Icon for Nimbostratus rankNimbostratus
May 17, 2015

F5 ASM and SIEM

Hi,   I am trying to integrate McAfee SIEM with F5 ASM and it seems the SIEM wouldn't parse the logs correctly. I have raised a ticket with McAfee and they confirmed that the SIEM is working fin...
ASM Advanced WAF
mcafee siem and asm
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 18, 2015

Mahesh, whoever is managing the ASM need to configure the Logging Profile for your ASM policy to be in the format acceptable by McAfee SIEM - if it is a delimiter issue then it can be easily configured in the Logging Profile screen(just change semi-colon to pipe in the Delimiter field).

 

Only McAfee can tell you what is the correct format their device is expecting - you can them ask the ASM guys to configure the logging profile to match this format.

 

Hope this helps,

 

Sam