Forum Discussion

The_Engima_Code's avatar
The_Engima_Code
Icon for Nimbostratus rankNimbostratus
May 18, 2015

McAfee SIEM and ASM

I am trying to integrate McAfee SIEM and F5 ASM 11.2.1. However, the SIEM doesn't parse the logs correctly. After raising a ticket with McAfee, they said the issue is with the log format which is sen...
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 18, 2015

Mahesh, whoever is managing the ASM need to configure the Logging Profile for your ASM policy to be in the format acceptable by McAfee SIEM - if it is a delimiter issue then it can be easily configured in the Logging Profile screen(just change semi-colon to pipe in the Delimiter field).

 

Only McAfee can tell you what is the correct format their device is expecting - you can them ask the ASM guys to configure the logging profile to match this format.

 

Hope this helps,

 

Sam

 

Related Content