Forum Discussion
The_Engima_Code
Nimbostratus
NimbostratusF5 ASM and SIEM
Hi,
I am trying to integrate McAfee SIEM with F5 ASM and it seems the SIEM wouldn't parse the logs correctly. I have raised a ticket with McAfee and they confirmed that the SIEM is working fin...
Jinshu
Cirrus
CirrusHi,
You can select 'Remote Storage Type' in the logging profile and change the delimited value to |.
- Navigate to Security ›› Event Logs : Logging Profiles ›› Edit Logging Profile
- You can see Remote Storage Type. Select 'Remote' from drop down.
- In the Facility field, type the delimter | instead ,
- Select the appropriate Storage Format from the available list.
- Update the config.
Hope this helps.
-Jinshu
