Sent WAF event from BIG-IQ to Remote server ( SOC arcsight)

Hi,

you can send to both together.

TIP:

1. Create a Pool with your IP of ArcSight
2. Create Log Destination HighSpeed with the pool
3. Create Log Destination Remote Syslog with the HSL above
4. Inside of remote-logging-publisher of WAF, insert destination create above

See if works, for me works in QRadar