For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

et2's avatar
et2
Icon for Nimbostratus rankNimbostratus
Sep 29, 2019

Send APM logs - all session info - to remote Splunk server.

Hello,

Trying to set up configuration that sends all APM session info - remote IP address, user ID, session time, everything - and the Splunk team is not getting all the information I see in the APM logs.

It could be the setup on the Splunk server, but the Splunk teams says they are set up to see everything I have sent them.

 

I can attach a detailed doc showing all configuration items. But I see no easy way to do this in Devcentral.

 

I followed all item configuration requirements from the below links.

 

 

 

https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-network-access-12-0-0/11.html

 

https://support.f5.com/csp/article/K17048

 

 

https://support.f5.com/csp/article/K13080

 

 

https://www.f5.com/pdf/solution-center/splunk-templates-for-apm.pdf

1 Reply

  • Hello, What is the log level of the Access Policy logs set to? You will need at least Informational to get all that type of data.