For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pascal_J's avatar
Pascal_J
Icon for Nimbostratus rankNimbostratus
Dec 26, 2019

Logging Dos Events

Hi I have a question about setting up alerts on DOS events. All the ASM logs are forwarded to a splunk server and i want to redirect (if possible) all dos events to splunk server. i tried to confi...
application delivery
ASM Advanced WAF
LTM
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Dec 26, 2019

Hi Pascal J,

Can you try this iRule for send logs to splunk server?

when IN_DOSL7_ATTACK {
    log <splunkIP:port> local0.info "Attacker IP: $DOSL7_ATTACKER_IP, Mitigation: $DOSL7_MITIGATION"
}