F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Sep 03, 2023

ASM Bot Defence logs with CEF Format

Hi all,

I have  a cluster with 2 BIG-IPs Ver 15.1.9.1 and i am using the modules LTM + WAF . I found out that WAF bot defence log is with the format Syslog.My SIEM can read CEF (ArcSight) so my question is if there is a way to change the Syslog format to CEF format or if there is possibility to add a unique identifier on the syslog logs of the Bot Defense so those can be read by the SIEM.

Thanks