Forum Discussion

Nimbostratus

Jun 15, 2015

Splunk for F5

Hi Guys, Is there anyone using Splunk for F5? What type of reporting Does Splunk create for the Logs received from F5 devices also what types of logs can be forwarded to the Splunk from F5 units...

Nimbostratus

Please refer the following links that gives you an idea and understanding. Best of luck.

https://devcentral.f5.com/articles/getting-started-with-splunk-for-f5

https://devcentral.f5.com/questions/splunk-for-f5-networks-ltm-v11-irule

https://devcentral.f5.com/articles/ltm-942-custom-syslog-configuration.UrPdlawybhM

If you trying to export the logs of ASM, then you need to configure remote logging profile and assign it to corresponding web application. Please refer the related links.

For v9.4.5-9.4.8: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm_945_config_guide/asm_sys_mgmt.html1028448

For v10.x: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm_config_10/asm_sys_mgmt.html1028448

From Splunk:

http://answers.splunk.com/answers/59279/how-do-you-configure-the-f5-to-send-its-logs-to-splunk.html