Ambiguous logs in /var/log/asm

Question

Hello Community,I noticed the below logs appearing in /var/log/asm frequently I am curious to know what could be the reason behind them.I just want to confirm that I dont have any "Automatic Policy" cofigured.&nbsp;=================================================info perl[x]: 01310053:6: ASMConfig change: [update] { audit: component = Policy Builder }info perl[x]: 01310053:6: ASMConfig change: [add]: IncidentType was set to Access from Malicious or Disallowed source.================================================

mohamed_ahmed_kansoh · Answer

Hi&nbsp;Sarah&nbsp;,&nbsp;&gt; I think you enable Automatic Learning with one of your policies so you find this Log much , I recommed to review your policies again maybe there is at least one policy has this option enabled by mistake.&nbsp;&gt; If you find any of your policies enables Automatic Learninng , this is maybe a reason for this Log.&nbsp;&gt; To know About "the Shape of Automatic policy builder " :&nbsp;Navigate this Article :&nbsp;https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/36.htmlHope this helps you&nbsp;

boneyard · Answer

Was that indeed the case Sarah&nbsp;
If so please flag the question as answered.

Forum Discussion

Ambiguous logs in /var/log/asm

2 Replies

Recent Discussions

F5Access | MacOS Sonoma

Rewrite uri translation not working

Chrome V 124+ on MacOS - Virtual Server Access Issue

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

ASM Logging to CLI /var/log/asm

ASM logs

ASM LOGS

Logging DNS Requests

How I did it - "Remote Logging with the F5 XC Global Log Receiver and Elastic"