For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rozh's avatar
Rozh
Icon for Nimbostratus rankNimbostratus
Jun 20, 2020

Separate Event Logs

Dear all,Hello I have a lot of logs F5 products in SIEM, Know I want to specify the logs of the Network Login Failed & Change Configuration,.... In general, I want to separate the Audit logs from ...
BIG-IP
F5 Rules for AWS WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jul 30, 2020

Hello Rozh,

 

For event logs you can configure remote logging profile on "Security ›› Event Logs : Logging Profiles" page with appropriate filter. e.g. "Login Result" only "failed"

 

Thanks, Ivan

Rozh's avatar
Rozh
Icon for Nimbostratus rankNimbostratus
Jul 31, 2020

Dear Chernenkii ,Thaks you .🙏

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Jul 31, 2020

    If this resolves your issue, then please mark this question as resolved.