Forum Discussion
The-messenger_1
Aug 17, 2017Nimbostratus
Session variables available to splunk
We have been working to get Big-ip data, usable, into splunk. Working with our splunk engineer, we've found that splunk does not have all the data the I get with sessiondump --allkeys. Splunk is ge...
boneyard
Aug 22, 2017MVP
perhaps already solved, if not this might be useful.
what is your APM logging profile currently? check at Access Policy ›› Access Profiles : Access Profiles List: Logs (last tab).
you can create a new logging profile with more logging turned on. if splunk just receives the APM log data you should get more, i see for example in that log file
Aug 22 20:05:09 bigip-01 info apmd[19436]: 01490007:6: /Common/ap:Common:c3356c01: Session variable 'session.logon.last.username' set to 'test'
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects