Forum Discussion

  • Do you have logging enabled? Check it in System -> Logs -> Configuration -> Options -> Under Audit Logging MCP -> Enable or Verbose. I think it's Disabled by default, if you enable it, you should see logs in /var/log/audit, or in web GUI - System -> Logs -> Audit
  • Yes, it's disabled by default up to version 11.6, and from then on enabled by default.
  • Nath's avatar
    Nath
    Icon for Cirrostratus rankCirrostratus
    Roman and Greg Hi, Logging are configured correctly, in fact we have seen some of our configs from the Audit logs. But there is a time that there is no logs made when we configured something.
  • In that case probably reload of mcpd process might help: https://support.f5.com/kb/en-us/solutions/public/13000/000/sol13030.html But you need to reboot box -> traffic interruption.
  • with AFM and ASM you need to ensure you have a logging profile setup and this needs to be assigned to each and every VS. alos ensure you are logging either all requests or blocked requests