Forum Discussion

Sekhar's avatar
Sekhar
Icon for Nimbostratus rankNimbostratus
Jan 13, 2016

understanding ASM logs

Hi All,

 

I have recently applied DOS profile to some of my VIP's. I am facing two issues..

 

  1. When I go to Security -- >Eventlogs --> DOS --> Application I could see F5 has logged some info on L7 attacks, but when I am trying to see same logs under Overview --> DOS, it is not logged over there. Please help in understanding why these ASM logs are not reflected under overview.
  2. Also, when I try to open the attack ID logs from Security -- >Eventlogs --> DOS --> Applications, it iis giving me "There is no data to display either due to the lack of relevant traffic, or due to the settings of the filter". Tried changing all the filters, but I am not able to see info for that particular ID.

We are running on 11.5.1 HF 10. Please help me understanding these logs.

 

Thanks,

 

Sekhar

 

ASM Advanced WAF
BIG-IP
security

1 Reply

  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Jan 27, 2016

    Sekhar,

     

    It sounds like you may either have logging setup incorrectly or be running into some kind of problem with the reporting. I would suggest you open a case with F5 support to dig into this and determine what is needed. You can reach support by calling 1-888-882-7525 or internationally 800 11 ASK 4 F5. Make sure you have your BigIP's serial number available as you will need it to open the case.