For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

redadmin1972's avatar
redadmin1972
Icon for Altocumulus rankAltocumulus
Apr 08, 2025

High Speed Logging vs Telemetry Streaming (Logging to SIEM)

My goals is to send web application traffic logs from my virtual servers to an external SIEM. It looks like there are quite a few ways to approach this, so I want to check with the community to see w...
hsl
logging
Telemetry Streaming
redadmin1972's avatar
redadmin1972
Icon for Altocumulus rankAltocumulus
Apr 09, 2025

I'm following up to clear things up and ask a more direct question: Which one of these three logging options would be best for virtual server request/response logging at scale? If you have any insight, I would appreciate it! Thank you

  1. iRule logging (Link)
  2. Request Logging Profile (Link)
  3. Telemetry Streaming (Link - AS3 Config Link - Telemetry Streaming Config)

 

PS. if you are having trouble with getting the Telemetry Streaming/Event Listener logging (option 3) to work in the future, make sure to enable loopback addressing and create a route to the 255.255.255.254 virtual server address referenced in the docs:

tmsh modify sys db tmm.tcl.rule.node.allow_loopback_addresses value true

tmsh create net route 255.255.255.254 network 255.255.255.254/32 interface INTERNAL

tmsh save sys config

Loopback Issue Link

Route Link