Forum Discussion
NimbostratusLTM logs, Audit logs and ASM logs
Hello Experts
I want to send LTM, Audit, System and ASM logs to external syslog server (splunk). For ASM particularly, there are two places for syslog configuration:
1- System -> Logs -> Configuration -> Remote Logging and options -> Application Security Logging 2- Application Security -> Options -> Logging Profile. Make syslog setting and call this profile in ASM policy
Where I need to configure syslog. I am confused using point 1 or point 2
2 Replies
EmadCirrostratus
As per your requirement you have to use both options. One for system level Logs and second for Application Security logs.
- ghost-rider_124
Hello
I configured below two settings and I am getting logs for ASM two times.
1- System -> Logs -> Configuration -> Remote Logging and options -> Application Security Logging 2- Application Security -> Options -> Logging Profile. Make syslog setting and call this profile in ASM policy
What can I do to avoid this? There is no option to disable syslogs for Web Security in option 1
