Forum Discussion

Manohar_Mekala's avatar
Manohar_Mekala
Icon for Altostratus rankAltostratus
Apr 24, 2021

What file are logs stored for the violations in Security->Event Logs->Protocol->HTTP

Want to check if there is a way to view the information presented in GUI for the violations in Security->Event Logs->Protocol->HTTP. What files are these files stored in. What is the CLI way to filt...
application delivery
ASM Advanced WAF
http protocol security
security
  • Dario_Garrido's avatar
    Dario_Garrido
    Apr 25, 2021

    Hello Manohar.

    Event logs are stored directly in the DB.

    You should query this DB to check these events out.

    https://support.f5.com/csp/article/K06821426

    ​

    Regards,

    Dario.

Dario_Garrido's avatar
Dario_Garrido
Icon for MVP rankMVP

Hello Manohar.

PRX.REQUEST_LOG has a column called "support_id".

# mysql -uasm -p`perl -MF5::Cfg -e 'print F5::Cfg::get_mysql_password()'` -e "select * from PRX.REQUEST_LOG where support_id = 9374597410145173508\G"
*************************** 1. row ***************************
                       id: 1
               support_id: 9374597410145173508
        support_id_suffix: 3508

Regards,

Dario.

Manohar_Mekala's avatar
Manohar_Mekala
Icon for Altostratus rankAltostratus
Apr 27, 2021
Okay thank you for all the feedback, I might raise this with support in that case. Regards Manny Mekala. PS: Sent via Outlook for Android<>