Forum Discussion

Amol_Amberkar's avatar
Amol_Amberkar
Icon for Employee rankEmployee
Sep 15, 2020

ASM | Reporting - Behaviourial DoS

HI All,

 

Is their an option to export the report based on Attack-ID detected & mitigated by the B-DoS solution with timestamp of the attack?

currenly was only sucessful to export the reports for last day, week, month - this is not very useful as only the Attack ID's are mentioned without any time stamps

 

The required info is availble on the dashboard but the ability to export is not present.

 

Any Ideas on how to achieve this?

 

Regards !!

ASM Advanced WAF
security

3 Replies

Sort By
  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Sep 15, 2020

    Yes, you can create a DoS logging profile and send the data via syslog to a remote logging destination. That should give you what you're after.

  • Amol_Amberkar's avatar
    Amol_Amberkar
    Icon for Employee rankEmployee
    Sep 15, 2020

    Thanks Erik.

     

    But that way there is a dependency on the SIEM or the remote logging solution.

     

    Can we not do it via our UI? Or if we want to schedule a report with these parameters?

     

    Asking this as we do have an option to export just that the timestamp is missing and the report then doesn’t make sense.

     

    Do you think we need a feature enhancement request for this?

     

    Regards

  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Sep 15, 2020

    Unfortunately not through the UI. Feature enhancement request is probably the way to go.