BIG -IQ ASM event log issues

[Rahul_Yadav]

Hi,

I have deployed BIG-IQ with 3 DCD nodes and enable service for DDOS and ASM on DCD.

Logging profile and Virtual server configured.

And able to see stat and report of ASM.

But unable view event log on BIG-IQ, not even the empty dashboard.

 

[Lidev]

Hello Rahul-yadav,

(TCP) 8514 Provides logging profile communication for Web Application Security between F5 BIG-IP<-> F5 BIG-IQ. Reference here : https://support.f5.com/csp/article/K15612

Have you check the connectivity on this tcp port between the two hosts thanks to a netcat first ?

[Rahul_Yadav]

There is no restriction in term of port. All devices in same mangement Plan.

The strange thing is here showing List is empty.

atleast it shows the empty dashboard.

[Lidev]

BIG-IQ is listening on port 8514 ?

[Rahul_Yadav]

Yes it is listening.

[Rahul_Yadav]

It is start working after creating remote logging profile on BIG-IP.

[Renato_Nol]

Hi Rahul, could you please share the remote logging profile. Since I have the same problem. Sorry if it's a simple thing to do, I'm a newbie to F5.

[Lidev]

Thank's for the updated !

[Dojs]

Check here how to create you logging profile to send info to big iq

https://clouddocs.f5.com/training/community/big-iq-cloud-edition/html/class8/module1/lab1.html

Just change the option BOT to Application