Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

samer_k_345725's avatar
samer_k_345725
Icon for Nimbostratus rankNimbostratus
May 28, 2018

F5 VPN Logs

Hi All,

 

Is there a way to check VPN Logs on my F5 device? via GUI or any other way, moreover i need to send these logs to my Qradar.

 

Appreciate you help.

 

Thanks,

 

2 Replies

  • Jens_Deprez's avatar
    Jens_Deprez
    Icon for Nimbostratus rankNimbostratus
    Jun 01, 2018

    Hi, I think the following thread has the answer you need. The point is that you expand the APM logging.

     

    Link to question

     

    I hope this will help you out.

     

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 01, 2018

    Hi Samer,

     

    You have the possibility to check your VPN Logs flowing several ways:

     

    • CLI: you have a logs file in /var/log/apm this file is incremented and compressed. then deleted. so if you want to see logs in real time enter this command: "tailf /var/log/ltm"

       

    • GUI: You can see all user session in "event Logs" click in "Built in reports" and All session.

       

    Important point you have to set log level (Access Policy ›› Event Logs : Log Settings). depending of the level of info that you want to see.

     

    If you want to send logs you can just set syslog configuration (System ›› Logs : Configuration : Remote Logging) then enter remote port and IP.

     

    https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-config-11-2-0/apm_config_loggingandreporting.html