Forum Discussion
Hoang_Hung
Cirrus
CirrusWAF Event Log on BIG-IQ not Real - Time
Hi all We have BIG-IQ system. But At this time WAF event log on BIG-IQ not real -time We have check event log on BIG-IP Device all ok. But on BIG-IQ not real -time Plz help me BIG-IQ: Time: Last ...
Ivan_Chernenkii
Employee
EmployeeIs 10.0.103.11 IP of LogNode or IP of BIG-IQ?... Make sure that BIG-IQ logging is configured through LogNode (https://techdocs.f5.com/kb/en-us/products/big-iq-security/manuals/product/bigiq-security-administration-4-4-0/16.html) and it is active.
Thanks, Ivan
Ivan_ChernenkiiEmployee
EmployeeHoang,
In such case, from configuration point of view, all looks correct and should work.
The only thing that you can do is gather tcpdumps on BIG-IP, Log Nodes, BIG-IQ and check how remote logging passes... and look at logs on BIG-IP, Log Nodes, BIG-IQ to find some errors.
There is no way to provide more help without access to the system.
If you won't find any other helpful debug information, then I would suggest you to open official SR for F5,
Thanks, Ivan
