shaikhzaid
Mar 14, 2023Altocumulus
f5 logs to azure
I have configured my F5 to forward the system, ltm and asm logs to azure sentinel by referring the below resource.
Under the system metrics settings, the AVR is installed, to push the declaration i need to execute below commands
tmsh modify analytics global-settings { offbox-protocol tcp offbox-tcp-addresses add { 127.0.0.1 } offbox-tcp-port 6514 use-offbox enabled } tmsh save /sys config
I want to know before executing the above in F5 cli, is there any HA failover or disruption is expected?
Accordingly, i will have to prepare my activity.
My F5 is in Azure cloud deployed as an HA (A-S).