Forum Discussion
Utkc137
Nimbostratus
NimbostratusMultiline logs in F5 Big
I am trying to Audit F5 ASM Logs in SIEM platform. The issue is, it seems like F5 is storing some of the logs with multiline description: This makes it very difficult to parse in SIEM as they...
zamroni777
Nacreous
Nacreousi guess they are in json or xml format.
if it is, the parser should not process them as plain text but as json/xml
Utkc137Nimbostratus
NimbostratusI don't think so, here's a screenshot from F5 backend:
Any way to make F5 store these as a single line event?