Forum Discussion

Rozh's avatar
Rozh
Icon for Nimbostratus rankNimbostratus
Jun 20, 2020

Separate Event Logs

Dear all,Hello I have a lot of logs F5 products in SIEM, Know I want to specify the logs of the Network Login Failed & Change Configuration,.... In general, I want to separate the Audit logs from ...
BIG-IP
F5 Rules for AWS WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jul 30, 2020

Hello Rozh,

 

For event logs you can configure remote logging profile on "Security ›› Event Logs : Logging Profiles" page with appropriate filter. e.g. "Login Result" only "failed"

 

Thanks, Ivan

  • Rozh's avatar
    Rozh
    Icon for Nimbostratus rankNimbostratus
    Jul 31, 2020

    Dear Chernenkii ,Thaks you .🙏

    • Ivan_Chernenkii's avatar
      Ivan_Chernenkii
      Icon for Employee rankEmployee
      Jul 31, 2020

      If this resolves your issue, then please mark this question as resolved.