F5 ASM Response logging show different timezone from Request logging

Hello, sokkhiang Vantage ADP

Certainly! The issue you’re facing with F5 AWAF response logging showing an incorrect log timezone for responses can be resolved. Here are some steps to troubleshoot and fix it:

• Timezone Configuration:
  As you’ve already checked the timezone settings on all devices, ensure that the BIG-IP, real servers, and clients are indeed configured correctly to GMT+7.
  Verify that the system clocks on these devices are synchronized and accurate.
• Logging Profiles:
  Make sure you’re using the correct logging profiles for both request and response logging.
  In the logging profile configuration, check if the Advanced options are available. You’ll find the Response Logging option there.
  Enable response logging in the appropriate profile.
• Timezone Mismatch:
  If the issue persists, consider the possibility of a timezone mismatch between the AWAF module and the system.
  Check if there’s a specific setting related to AWAF timezone that needs adjustment.

Remember to validate each step carefully, I hope my suggestion is helpful for you.

Best Regard,
ryan1969

Thanks Riyan for your response.

I have already verified these timezone setting are correct, and logging profile also enabled for responses.

Now i have a temporary solution by using irule to trigger the correct timezone in response logs.