WAF_Monkey
Dec 03, 2020Altostratus
ASM Chart Numbers Skewed From Event Logs
Under Security >> Reporting:Application:Charts, when viewing by Request Types for the Time Period of "Last Month", I'm seeing vastly different numbers than what the event logs show for the same time period. For example, Blocked requests show 22 in the charts yet show 645,446 in the event logs. I see similar differences for Legal and Alarmed requests. I manage several F5's running ASM and this only occurs on two boxes that are running v14.1.0.6.
Has anyone seen this before? Any ideas why this is happening? It's screwing up my monthly metrics! :-(