Forum Discussion
NimbostratusWhat is the best log Log Analysis Tool for F5 AFM/APM?
If you have many F5 devices, you may consider using the F5 BIG-IQ central managment platform as it can collect statistics and manage many F5 devices with all their modules like AFM/APM. BIG-IQ with DCD can monitor your LTM/APM. There is a trial version of BIG-IQ or you can ask the F5 sales for a Demo to see if it is what you want and need
Other options that were already mentioned to you are SIEM solutions like QRadar or Splunk but for a small company ELK is also an option as there is a free option and if you want vendor support then you pay for it. With the SIEM solutions you may need to build dashboards for AFM and APM as F5 has pluggins for most SIEM solution but primary for LTM/ASM(AWAF) and BIG-IQ already has prebuild dashboard.
https://www.elastic.co/guide/en/welcome-to-elastic/current/getting-started-guides.html
https://www.elastic.co/security/siem
MVPIf you have many F5 devices, you may consider using the F5 BIG-IQ central managment platform as it can collect statistics and manage many F5 devices with all their modules like AFM/APM. BIG-IQ with DCD can monitor your LTM/APM. There is a trial version of BIG-IQ or you can ask the F5 sales for a Demo to see if it is what you want and need
Other options that were already mentioned to you are SIEM solutions like QRadar or Splunk but for a small company ELK is also an option as there is a free option and if you want vendor support then you pay for it. With the SIEM solutions you may need to build dashboards for AFM and APM as F5 has pluggins for most SIEM solution but primary for LTM/ASM(AWAF) and BIG-IQ already has prebuild dashboard.
https://www.elastic.co/guide/en/welcome-to-elastic/current/getting-started-guides.html
https://www.elastic.co/security/siem
NimbostratusFor anybody reading this don't waste your time with BIG IQ. It's not capable of any alerting. No custom alerts, no nothing. F5 says to use third party if you want to know when a member of your pool is down.
