A few questions: do you have a healthy status on the DCD nodes in BIG-IQ? Do you have the stats feature enabled via BIG-IQ for the BIG-IP?
also a change a few versions ago was to have the BIG-IP push statistics to the DCD. So in this case you need to have communications between the BIG-IQ and DCDs and the BIG-IP in both directions: https://support.f5.com/csp/article/K96505382
I'm getting ASM details, but not firewall
Every thing looks health - nothing in BIG IQ to say there is an issue
Checked the link connectivity is there and there seems to be a link. as I said the ASM logs are making it not the firewall logs!
it looks like I have to setup a firewall logger and send it to the DCD port assigned to network.
Its a pain especially as you pointed out a dedicated IP -> DCD link