Forum Discussion
natethegreat_23
Nimbostratus
NimbostratusNo Sample Requests are "found" in v12 ASM Traffic Learning
When I am looking at the Traffic Learning in v12 ASM there are many examples where there are no sample requests so I can't even see the context for the traffic suggestion. (Image below) Is there a wa...
Karim_Benyello1
Cirrus
CirrusHi
I'm facing the exact same issue, ie :
- My policy is in blocking mode
- My attack signatures are in staging
- I have a "log illegal request only" logging profile attached to my virtual server
- All my attacks signatures have the learn, alarm, block flag enabled
However, while reviewing learning suggestion regarding an attack signature (in this case 200101421 - onEvent (Header)) I do not see the requests that trigger this learning suggestion. I have "0 simple requests out of 142 that triggered the suggestion from 2019-03-05 unitil 2019-03-30 21:30:25"
If the reason I'm not seeing the requests is a local storage issue . Could you please tell how do I check the remaining local storage capacity ? and how the bigip handle the local storage once there is no space left ?
Many thanks, Karim
boneyard
MVP
MVPa new question usually helps better then adding to an old one.
there is like 25 days in that time range, that is quite long. have the signatures been in staging for that long or even longer?
i would disable staging, enable and just check again more regularly.
there is no way to check for database storage that im aware of, once it is full it will override the older stuff.