Forum Discussion
docdriza_161671
Nimbostratus
NimbostratusLogs need to be sent to McAfee SIEM
Hello all,
I am new to F% and BIG IP. I am currently on version 11.3. I am trying to send logs from the BIG IP to my McAfee SIEM. After talking with McAfee they say that the format of the logs n...
Cliff_126534Nimbostratus
NimbostratusMaybe this will be of use to you?
https://devcentral.f5.com/articles/big-ip-logging-and-reporting-toolkit-part-one
Specifically this: https://devcentral.f5.com/wiki/iRules.NEDSRule.ashx
docdriza_161671I have looked at the iRule page, but it confuses me because it specifically talks about Splunk. Plus in part 4 when they talk about defining the syslog server they define version 9 and 10. i am on version 11.3. I know a little about scripting, but I cannot figure this out. I guess the thing that I really asking is how do I define the syslog server I would like to send my logs to? Based off what was suggested, I am not sure how to do that.
